Problem z uprawnieniami, Avg antywirus odmawia posłuszeństwa

[berger007]

Witam wszystkich mam problem z uprawnieniami np Avg antywirus odmawia posłuszeństwa prosze o sprawdzenie loga z otl


OTL.txt

http://www.wklej.eu/index.php?id=23c7a476fa


extras.txt

http://www.wklej.eu/index.php?id=f336128702


pozdrawiam i prosze o pomoc

[mateo8898]

Podaj wymagane logi z FRST otl-gmer-i-inne-poradnik-t13967-15.html#p164179 i Gmer otl-gmer-silent-runners-sdfix-i-inne-poradnik-t13967.html#p88736

[berger007]

prosze bardzo

frst.txt

http://www.wklej.eu/index.php?id=a211b2792e

addition.txt

http://www.wklej.eu/index.php?id=a8e86dc07c

gmer

http://www.wklej.eu/index.php?id=371e4d1546

[mateo8898]

Wklej do notatnika:

S3 atillk64; \??\C:\Users\Berger\Desktop\ati_winflash_2.6.7\atillk64.sys [X]
S3 avchv; system32\DRIVERS\avchv.sys [X]
S3 cpuz136; \??\C:\Windows\TEMP\cpuz136\cpuz136_x64.sys [X]
S3 cpuz137; \??\C:\Windows\TEMP\cpuz137\cpuz137_x64.sys [X]
S3 GPUTool; \??\C:\Users\Berger\AppData\Local\Temp\GPUTool.sys [X]
S3 GPUZ; \??\C:\Windows\TEMP\GPUZ.sys [X]
S3 MSICDSetup; \??\D:\CDriver64.sys [X]
S3 NTIOLib_1_0_4; \??\C:\Program Files (x86)\MSI\Live Update\NTIOLib_X64.sys [X]
S3 NTIOLib_1_0_C; \??\D:\NTIOLib_X64.sys [X]
S4 nvvad_WaveExtensible; system32\drivers\nvvad64v.sys [X]
S3 SANDRA; \??\C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2015\WNt600x64\Sandra.sys [X]
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]
FF SearchPlugin: C:\Users\Berger\AppData\Roaming\Mozilla\Firefox\Profiles\0304aeom.default\searchplugins\securesearch.xml
FF SearchPlugin: C:\Users\Berger\AppData\Roaming\Mozilla\Firefox\Profiles\0304aeom.default\searchplugins\starter-1.xml
FF SearchPlugin: C:\Users\Berger\AppData\Roaming\Mozilla\Firefox\Profiles\0304aeom.default\searchplugins\starter-2.xml
FF SearchPlugin: C:\Users\Berger\AppData\Roaming\Mozilla\Firefox\Profiles\0304aeom.default\searchplugins\starter.xml
FF NewTab: hxxp://securedsearch.lavasoft.com/?pr=vmn&id=webcompa&ent=hp_WCYID10088_installki_141224
FF SelectedSearchEngine: Ad-Aware SecureSearch
FF Homepage: hxxp://securedsearch.lavasoft.com/?pr=vmn&id=webcompa&ent=hp_WCYID10088_installki_141224
SearchScopes: HKCU - {BDF61FAE-9D19-40F0-8F34-688DEB334CA9} URL = http://securedsearch.lavasoft.com/results.php?pr=vmn&id=webcompa&ent=ch_WCYID10088_installki_141224&q={searchTerms}
SearchScopes: HKCU - DefaultScope {BDF61FAE-9D19-40F0-8F34-688DEB334CA9} URL = http://securedsearch.lavasoft.com/results.php?pr=vmn&id=webcompa&ent=ch_WCYID10088_installki_141224&q={searchTerms}
HKU\S-1-5-21-2733490614-328098666-4053699945-1000\...\Winlogon: [Shell] explorer.exe [2871808 2011-02-25] (Microsoft Corporation) <==== ATTENTION
EmptyTemp:

Plik zapisujesz pod nazwą fixlist.txt i umieszczasz obok FRST. Uruchom FRST i kliknij w nim Fix. Powstanie plik fixlog.txt, który podajesz na forum.
Następnie podaj nowe logi z FRST.

[berger007]

Prosze Bardzo

Kod: Zaznacz wszystko

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 28-12-2014
Ran by Berger at 2014-12-28 21:41:58 Run:1
Running from C:\Users\Berger\Desktop
Loaded Profile: Berger (Available profiles: Berger)
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
S3 atillk64; \??\C:\Users\Berger\Desktop\ati_winflash_2.6.7\atillk64.sys [X]
S3 avchv; system32\DRIVERS\avchv.sys [X]
S3 cpuz136; \??\C:\Windows\TEMP\cpuz136\cpuz136_x64.sys [X]
S3 cpuz137; \??\C:\Windows\TEMP\cpuz137\cpuz137_x64.sys [X]
S3 GPUTool; \??\C:\Users\Berger\AppData\Local\Temp\GPUTool.sys [X]
S3 GPUZ; \??\C:\Windows\TEMP\GPUZ.sys [X]
S3 MSICDSetup; \??\D:\CDriver64.sys [X]
S3 NTIOLib_1_0_4; \??\C:\Program Files (x86)\MSI\Live Update\NTIOLib_X64.sys [X]
S3 NTIOLib_1_0_C; \??\D:\NTIOLib_X64.sys [X]
S4 nvvad_WaveExtensible; system32\drivers\nvvad64v.sys [X]
S3 SANDRA; \??\C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2015\WNt600x64\Sandra.sys [X]
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]
FF SearchPlugin: C:\Users\Berger\AppData\Roaming\Mozilla\Firefox\Profiles\0304aeom.default\searchplugins\securesearch.xml
FF SearchPlugin: C:\Users\Berger\AppData\Roaming\Mozilla\Firefox\Profiles\0304aeom.default\searchplugins\starter-1.xml
FF SearchPlugin: C:\Users\Berger\AppData\Roaming\Mozilla\Firefox\Profiles\0304aeom.default\searchplugins\starter-2.xml
FF SearchPlugin: C:\Users\Berger\AppData\Roaming\Mozilla\Firefox\Profiles\0304aeom.default\searchplugins\starter.xml
FF NewTab: hxxp://securedsearch.lavasoft.com/?pr=vmn&id=webcompa&ent=hp_WCYID10088_installki_141224
FF SelectedSearchEngine: Ad-Aware SecureSearch
FF Homepage: hxxp://securedsearch.lavasoft.com/?pr=vmn&id=webcompa&ent=hp_WCYID10088_installki_141224
SearchScopes: HKCU - {BDF61FAE-9D19-40F0-8F34-688DEB334CA9} URL = http://securedsearch.lavasoft.com/results.php?pr=vmn&id=webcompa&ent=ch_WCYID10088_installki_141224&q={searchTerms}
SearchScopes: HKCU - DefaultScope {BDF61FAE-9D19-40F0-8F34-688DEB334CA9} URL = http://securedsearch.lavasoft.com/results.php?pr=vmn&id=webcompa&ent=ch_WCYID10088_installki_141224&q={searchTerms}
HKU\S-1-5-21-2733490614-328098666-4053699945-1000\...\Winlogon: [Shell] explorer.exe [2871808 2011-02-25] (Microsoft Corporation) <==== ATTENTION
EmptyTemp:
*****************

atillk64 => Service deleted successfully.
avchv => Service deleted successfully.
cpuz136 => Service deleted successfully.
cpuz137 => Service not found.
GPUTool => Service deleted successfully.
GPUZ => Service deleted successfully.
MSICDSetup => Service deleted successfully.
NTIOLib_1_0_4 => Service deleted successfully.
NTIOLib_1_0_C => Service deleted successfully.
nvvad_WaveExtensible => Service deleted successfully.
SANDRA => Service deleted successfully.
Synth3dVsc => Service deleted successfully.
tsusbhub => Service deleted successfully.
VGPU => Service deleted successfully.
C:\Users\Berger\AppData\Roaming\Mozilla\Firefox\Profiles\0304aeom.default\searchplugins\securesearch.xml => Moved successfully.
C:\Users\Berger\AppData\Roaming\Mozilla\Firefox\Profiles\0304aeom.default\searchplugins\starter-1.xml => Moved successfully.
C:\Users\Berger\AppData\Roaming\Mozilla\Firefox\Profiles\0304aeom.default\searchplugins\starter-2.xml => Moved successfully.
C:\Users\Berger\AppData\Roaming\Mozilla\Firefox\Profiles\0304aeom.default\searchplugins\starter.xml => Moved successfully.
Firefox newtab deleted successfully.
Firefox SelectedSearchEngine deleted successfully.
Firefox homepage deleted successfully.
\\SearchScopes: HKCU - {BDF61FAE-9D19-40F0-8F34-688DEB334CA9} URL = http://securedsearch.lavasoft.com/results.php?pr=vmn&id=webcompa&ent=ch_WCYID10088_installki_141224&q={searchTerms} => Value not found.
\\SearchScopes: HKCU - DefaultScope {BDF61FAE-9D19-40F0-8F34-688DEB334CA9} URL = http://securedsearch.lavasoft.com/results.php?pr=vmn&id=webcompa&ent=ch_WCYID10088_installki_141224&q={searchTerms} => Value not found.
HKU\S-1-5-21-2733490614-328098666-4053699945-1000\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\\Shell => value deleted successfully.
EmptyTemp: => Removed 1.9 GB temporary data.


The system needed a reboot.

==== End of Fixlog 21:42:06 ====

[mateo8898]

Logi wklejamy na http://www.wklej.eu/. Poza tym nie podałeś nowych logów z FRST, uzupełnij.

[berger007]

additional.txt

http://www.wklej.eu/index.php?id=f1efdd46dd


frst.txt

http://www.wklej.eu/index.php?id=34d2585bf7

[mateo8898]

Z logami tyle, kroki końcowe:
Wklej do notatnika:

S3 cpuz137; \??\C:\Windows\TEMP\cpuz137\cpuz137_x64.sys [X]
S3 GPUZ; \??\C:\Windows\TEMP\GPUZ.sys [X]
EmptyTemp:

Plik zapisujesz pod nazwą fixlist.txt i umieszczasz obok FRST. Uruchom FRST i kliknij w nim Fix

Przeczyść dysk oraz rejestr CCleaner (zakładka Cleaner i Rejestr)

[berger007]

Problem nie zniknoł dalej mam nie moge dodać wyjątku do avg

[mateo8898]

dalej mam nie moge dodać wyjątku do avg

Akurat nic o tym wcześniej nie wspominałeś. Najlepiej opisz dokładnie problem.