Previous
- 1
- 2
-
re
ok, do this on the PC that doesn't have a connection
/!\Script only for this computer, do not reproduce on another computer/!\
open Notepad
copy/paste the text below:
CreateRestorePoint: CloseProcesses: (Sonix) C:\Windows\vsnp2std.exe () C:\Windows\FixCamera.exe () C:\Windows\tsnp2std.exe () C:\Program Files (x86)\PDF Pro 10\vspdfprsrv.exe () C:\Windows\runSW.exe HKLM-x32\...\Run: [DriverPack Notifier] => C:\Program Files (x86)\DriverPack Notifier\DriverPackNotifier.exe [258560 2015-12-18] () Startup: C:\Users\TECHNIC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Launch WhiteSmoke.lnk [2011-09-06] ShortcutTarget: Launch WhiteSmoke.lnk -> C:\Program Files (x86)\WhiteSmoke\WSEnrichment.exe (No file) GroupPolicy: Restriction - Chrome <==== WARNING GroupPolicy\User: Restriction ? <==== WARNING CHR HKLM\SOFTWARE\Policies\Google: Restriction <==== WARNING URLSearchHook: HKU\S-1-5-21-3245896594-2290735146-2513037421-1000 - (No name) - {167d9323-f7cc-48f5-948a-6f012831a69f} - No file URLSearchHook: HKU\S-1-5-21-3245896594-2290735146-2513037421-1000 - (No name) - {bb1227ac-7a0d-4076-8c1a-51a1348f6fa8} - No file URLSearchHook: HKU\S-1-5-21-3245896594-2290735146-2513037421-1000 - (No name) - {efb1e45a-148d-40f9-a3f0-09d5577f9970} - No file SearchScopes: HKLM -> {2E00D31D-D171-423D-836D-1A4D7EA7F1A9} URL = SearchScopes: HKLM -> {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1 SearchScopes: HKLM -> {f7bb050c-e116-44da-89c2-6f2b68c54836} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSERBM&pc=MSERT1 SearchScopes: HKLM-x32 -> DefaultScope {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1 SearchScopes: HKLM-x32 -> {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW SearchScopes: HKLM-x32 -> {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1 SearchScopes: HKLM-x32 -> {f7bb050c-e116-44da-89c2-6f2b68c54836} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSERBM&pc=MSERT1 SearchScopes: HKU\S-1-5-21-3245896594-2290735146-2513037421-1000 -> DefaultScope {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1 SearchScopes: HKU\S-1-5-21-3245896594-2290735146-2513037421-1000 -> {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1 SearchScopes: HKU\S-1-5-21-3245896594-2290735146-2513037421-1000 -> {2E00D31D-D171-423D-836D-1A4D7EA7F1A9} URL = hxxp://search.babylon.com/?q={searchTerms}&AF=109101&babsrc=SP_ss&mntrId=28a33ac700000000000000212f33ec0f SearchScopes: HKU\S-1-5-21-3245896594-2290735146-2513037421-1000 -> {53C4E833-A55E-429B-A5F1-2E3C1025B1FA} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2504091 SearchScopes: HKU\S-1-5-21-3245896594-2290735146-2513037421-1000 -> {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW_fr___CA376 SearchScopes: HKU\S-1-5-21-3245896594-2290735146-2513037421-1000 -> {6DE590C2-0B6C-411E-9419-5EEDEAEF5DE7} URL = hxxp://websearch.ask.com/redirect?client=ie&tb=FWV5&o=14193&src=kw&q={searchTerms}&locale=&apn_ptnrs=FM&apn_dtid=TES002U1CA&apn_uid=3c623375-6812-4d42-89ce-63d3bce6fe17&apn_sauid=99442E40-D177-426C-87F3-BD47723271AB SearchScopes: HKU\S-1-5-21-3245896594-2290735146-2513037421-1000 -> {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL = hxxp://dts.search-results.com/sr?src=ieb&appid=171&systemid=406&sr=0&q={searchTerms} SearchScopes: HKU\S-1-5-21-3245896594-2290735146-2513037421-1000 -> {f7bb050c-e116-44da-89c2-6f2b68c54836} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSERBM&pc=MSERT1 BHO-x32: No name -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> No file BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll => No file Toolbar: HKLM - avast! WebRep - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No file Toolbar: HKU\S-1-5-21-3245896594-2290735146-2513037421-1000 -> No name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No file Toolbar: HKU\S-1-5-21-3245896594-2290735146-2513037421-1000 -> No name - {167D9323-F7CC-48F5-948A-6F012831A69F} - No file Toolbar: HKU\S-1-5-21-3245896594-2290735146-2513037421-1000 -> No name - {BB1227AC-7A0D-4076-8C1A-51A1348F6FA8} - No file Toolbar: HKU\S-1-5-21-3245896594-2290735146-2513037421-1000 -> No name - {EFB1E45A-148D-40F9-A3F0-09D5577F9970} - No file Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.dll No file Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.dll No file FF Plugin: @microsoft.com/GENUINE -> disabled [No file] FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No file] CHR HomePage: Default -> hxxp://astromenda.com/?f=1&a=ast_ir_14_43_ch&cd=2XzuyEtN2Y1L1QzuyEyEzzyB0F0CyC0A0C0BzyyBtA0A0CyBtN0D0Tzu0StCtDtBzytN1L2XzutAtFyDtFtCtFyEtN1L1CzutCyEtBzytDyD1V1StN1L1G1B1V1N2Y1L1Qzu2SyCyE0FyDzy0C0D0AtG0BzytDzytG0F0D0DtBtGtByDyEtBtGtByB0D0FtD0E0Fzzzy0C0B0F2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyDtBzyzz0AyByD0AtGyDtC0BtCtGyE0Ezz0DtGzztCtAtAtG0B0AtB0FyCyDtCtAzy0C0B0F2Q&cr=1068831401&ir= CHR HKLM\...\Chrome\Extension: [ajcmdlkeklfmbjffnlofgfkjcnpfckab] - hxxps://clients2.google.com/service/update2/crx CHR HKLM\...\Chrome\Extension: [bpmmandcadflhnnaiclipadomfmdbjbp] - hxxps://clients2.google.com/service/update2/crx CHR HKLM\...\Chrome\Extension: [ehlceeijggpdgfcefmipcmdelickjgfg] - hxxps://clients2.google.com/service/update2/crx CHR HKLM\...\Chrome\Extension: [pfkfdlcdbajamklbneflfbcmfgddmpae] - hxxps://clients2.google.com/service/update2/crx CHR HKU\S-1-5-21-3245896594-2290735146-2513037421-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [ajcmdlkeklfmbjffnlofgfkjcnpfckab] - hxxps://clients2.google.com/service/update2/crx CHR HKU\S-1-5-21-3245896594-2290735146-2513037421-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [bpmmandcadflhnnaiclipadomfmdbjbp] - hxxps://clients2.google.com/service/update2/crx CHR HKU\S-1-5-21-3245896594-2290735146-2513037421-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [ehlceeijggpdgfcefmipcmdelickjgfg] - hxxps://clients2.google.com/service/update2/crx CHR HKU\S-1-5-21-3245896594-2290735146-2513037421-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [pfkfdlcdbajamklbneflfbcmfgddmpae] - hxxps://clients2.google.com/service/update2/crx CHR HKLM-x32\...\Chrome\Extension: [ajcmdlkeklfmbjffnlofgfkjcnpfckab] - hxxps://clients2.google.com/service/update2/crx CHR HKLM-x32\...\Chrome\Extension: [bpmmandcadflhnnaiclipadomfmdbjbp] - hxxps://clients2.google.com/service/update2/crx CHR HKLM-x32\...\Chrome\Extension: [ehlceeijggpdgfcefmipcmdelickjgfg] - hxxps://clients2.google.com/service/update2/crx CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - hxxps://clients2.google.com/service/update2/crx CHR HKLM-x32\...\Chrome\Extension: [pfkfdlcdbajamklbneflfbcmfgddmpae] - hxxps://clients2.google.com/service/update2/crx S1 cxdlflah; \??\C:\Windows\system32\drivers\cxdlflah.sys [X] 2018-07-17 15:44 - 2018-07-17 15:44 - 000000000 ____D C:\Users\TECHNIC\AppData\Roaming\DRPSu 2018-07-17 15:44 - 2018-07-17 15:44 - 000000000 ____D C:\Users\TECHNIC\AppData\Roaming\DRPNano 2018-07-12 20:32 - 2018-07-26 09:04 - 000000362 _____ C:\Windows\Tasks\DriverToolkit Autorun.job 2018-07-12 20:32 - 2018-07-12 20:32 - 000002726 _____ C:\Windows\System32\Tasks\DriverToolkit Autorun 2018-07-12 20:28 - 2018-07-12 21:56 - 000000000 ____D C:\Program Files (x86)\DriverToolkit 2018-07-12 20:28 - 2018-07-12 20:28 - 000000000 ____D C:\Users\TECHNIC\AppData\Local\DriverToolkit 2018-07-10 14:20 - 2018-07-10 14:20 - 000000000 ____D C:\Users\TECHNIC\Desktop\AWLL6075_6077v2_5077_5055 2011-12-01 14:18 - 2011-12-01 14:18 - 000008625 _____ () C:\Users\TECHNIC\AppData\Roaming\UserTile.png 2014-10-25 20:52 - 2018-01-24 11:52 - 000000822 _____ () C:\Users\TECHNIC\AppData\Roaming\WB.CFG 2010-04-19 17:43 - 2011-01-28 15:27 - 000000106 _____ () C:\Users\TECHNIC\AppData\Roaming\wklnhst.dat 2014-10-30 21:41 - 2014-10-30 21:41 - 000022528 _____ () C:\Users\TECHNIC\AppData\Local\411107001dsisetup4111135222.exe 2014-10-30 21:41 - 2014-12-17 01:52 - 000000001 _____ () C:\Users\TECHNIC\AppData\Local\DSI.DAT 2014-11-22 13:52 - 2014-11-22 13:52 - 000022528 _____ () C:\Users\TECHNIC\AppData\Local\dsisetup26968822.exe 2014-12-02 01:52 - 2014-12-02 01:52 - 000022528 _____ () C:\Users\TECHNIC\AppData\Local\dsisetup6577906022.exe 2014-12-17 01:52 - 2014-12-17 01:52 - 000022528 _____ () C:\Users\TECHNIC\AppData\Local\dsisetup929492482.exe 2014-11-22 13:52 - 2014-11-22 13:52 - 000000008 _____ () C:\Users\TECHNIC\AppData\Local\ext2.dat 2014-11-22 13:52 - 2014-11-22 13:52 - 000022528 _____ () C:\Users\TECHNIC\AppData\Local\extsetup26937001.exe 2014-11-22 13:52 - 2014-11-22 13:52 - 000643948 _____ () C:\Users\TECHNIC\AppData\Local\extsq.dll 2018-02-05 14:19 - 2018-02-05 14:23 - 000013054 _____ () C:\Users\TECHNIC\AppData\Local\MyWinLockerInstaller.txt-20180205.log 2017-12-12 18:52 - 2017-12-12 18:52 - 000000052 _____ () C:\Users\TECHNIC\AppData\Local\px5aiqy6bj 2013-06-19 22:10 - 2013-06-24 22:00 - 000035224 _____ () C:\Users\TECHNIC\AppData\Local\Temp\i4jdel0.exe 2015-04-05 18:07 - 2015-04-05 18:07 - 001055936 _____ (Adobe) C:\Users\TECHNIC\AppData\Local\Temp\install_flashplayer17x32axau_ltr5x64d_awc_aih.exe 2013-08-24 14:22 - 2013-08-24 14:25 - 031954536 _____ (Skype Technologies S.A.) C:\Users\TECHNIC\AppData\Local\Temp\SkypeSetup.exe 2013-03-29 07:07 - 2012-07-16 04:56 - 004451144 _____ (Conduit Ltd.) C:\Users\TECHNIC\AppData\Local\Temp\tbVuze.dll 2013-06-19 22:09 - 2013-06-19 22:10 - 003750104 _____ (WinZip International LLC ) C:\Users\TECHNIC\AppData\Local\Temp\winziprosetup-WZRO6_20130221.exe DriverPack Notifier (HKLM-x32\...\DriverPack Notifier) (Version: 2.0 - DriverPack Solution) CustomCLSID: HKU\S-1-5-21-3245896594-2290735146-2513037421-1000_Classes\CLSID\{144DF3B2-2402-47AE-9583-5A045929A8D4}\InprocServer32 -> C:\Users\TECHNIC\AppData\Local\Google\Update\1.3.33.5\psuser_64.dll => No file CustomCLSID: HKU\S-1-5-21-3245896594-2290735146-2513037421-1000_Classes\CLSID\{91A41FCC-BC02-42D8-A36E-0D27FF9BFFC8}\InprocServer32 -> C:\Users\TECHNIC\AppData\Local\Google\Update\1.3.33.7\psuser_64.dll => No file CustomCLSID: HKU\S-1-5-21-3245896594-2290735146-2513037421-1000_Classes\CLSID\{CB492AF1-2CEF-4E58-BE47-471C77D0C8BA}\InprocServer32 -> C:\Users\TECHNIC\AppData\Local\Google\Update\1.3.32.7\psuser_64.dll => No file ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> No file ContextMenuHandlers3: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> No file Task: {2B0BC07D-9607-4B7F-9323-54A7AA1BCEE0} - System32\Tasks\DriverPack Notifier => C:\Program Files (x86)\DriverPack Notifier\DriverPackNotifier.exe [2015-12-18] () Task: {5ECFB392-51A3-4A86-B949-398784F5FB60} - System32\Tasks\{EF3FA9E5-DD0B-46AA-93D3-51500FCCEB52} => C:\Windows\system32\pcalua.exe -a "C:\Users\TECHNIC\Downloads\eMule0.50a-Installer (1).exe" -d C:\Users\TECHNIC\Desktop Task: {A98A4419-601E-4A38-B522-2EB4CBA0903C} - System32\Tasks\DriverToolkit Autorun => C:\Program Files (x86)\DriverToolkit\DriverToolkit.exe Task: {BA1D2D88-6478-4B36-9849-D5D47AD188B5} - System32\Tasks\{29050D64-37A3-4966-A492-C5E96FCCC4C1} => C:\Windows\system32\pcalua.exe -a D:\SETUP.EXE -d D:\ Task: C:\Windows\Tasks\DriverToolkit Autorun.job => C:\Program Files (x86)\DriverToolkit\DriverToolkit.exe 54.204.28.26 dlgdjipfpeahlpmmjcclaeeodpdmjipc MSCONFIG\startupreg: Adobe Reader Speed Launcher => C:\Users\TECHNIC\AppData\Roaming\Microsoft\service104.exe FirewallRules: [TCP Query User{F10B17F2-C022-45B8-8BF0-4E37AD3534E3}C:\program files (x86)\emule\emule.exe] => (Allow) C:\program files (x86)\emule\emule.exe FirewallRules: [UDP Query User{607974A2-9A82-43C2-9EA6-EEF572EA6468}C:\program files (x86)\emule\emule.exe] => (Allow) C:\program files (x86)\emule\emule.exe FirewallRules: [{984E8238-F245-4788-AC29-7A370A4B2BEE}] => (Allow) C:\Program Files (x86)\Framed Display\bin\FramedDisplay.BRT.Helper.exe FirewallRules: [{0A0F1F28-AC7B-46DB-B54D-65A3DF5E9E6E}] => (Allow) C:\Program Files (x86)\Framed Display\bin\FramedDisplay.BRT.Helper.exe FirewallRules: [{E256E811-88D2-4F8D-9155-47BFD420934E}] => (Allow) C:\Users\TECHNIC\AppData\Local\Chromium\Application\chrome.exe RemoveProxy: Hosts: EmptyTemp: Reboot:
when the text is copied/pasted, click on "file">>"save as" and choose "desktop" from the left column
at the bottom of the page, in "file name", type fixlist.txt and click on "save"
run FRST and click on "fix"
when the fix is complete, a text file will appear on your desktop, copy/paste the result in your next reply
@+
--
the radiation level is higher at the employment office than at Chernobyl -
re
no worries about the time it takes you, as long as you do it :)
@+
--
the radiation level is higher at the unemployment office than at Chernobyl -
Hi,
I'm getting back to you after several weeks, I was able to do the manipulation with FRST
here are the results:
https://www.cjoint.com/c/HHoslVb4UfF
Thank you ;) -
Hi
How's the computer doing?
Can you redo the fix in safe mode and post the report
Catch you later
--
The radiation level is higher at the unemployment office than at Chernobyl-
Hi!
The PC is having trouble starting up; I can't see the Windows logo, it's totally pixelated...
Otherwise, after 30 seconds everything goes back to normal.
Still no Wi-Fi in sight; I bought an Ethernet cable and I'm waiting for it to arrive.
I booted in safe mode again, but I'll send you the file on cjoint later today. Being evening for you, I imagine ;) -
-
-
Hi
how is the PC now?
@+
--
the radiation level is higher at the unemployment office than at Chernobyl -
Run an sfc.
Go to start
All programs
Accessories
Right-click on --> command prompt
Choose --> run as administrator and confirm
Type --> sfc /scannow and press enter.
A system file check will take place.
--
Human beings are at their best when things are at their worst. -
Repair Windows 7 without data loss.
Check out this tutorial --> Repair Windows 7
--
Human beings are at their best when things are at their worst. -
Previous
- 1
- 2