Profilaktyczne sprawdzenie logów

[Łowca Androidów]

FRST:
http://www.wklej.org/id/1773600/txt/

Addition:
http://www.wklej.org/id/1772722/txt/

na pewno omiga do wywalenia, ale co jeszcze?

[ordynat]

Do usunięcia są Zaplanowane Zadania oznaczone jako "pcalua", oraz te, które w WIN 10 są zbędne.
Poza "omigą" nie ma żadnej infekcji.

Otwórz Notatnik i wklej w nim:

Task: {057CFE21-3D9B-42ED-AC1F-B4BBCAEB6A1D} - System32\Tasks\{A67C22B7-8168-4081-B464-1C38DC881C35} => pcalua.exe -a F:\Setup.exe -d F:\
Task: {0F2B788B-28CC-4F80-AD19-384C627F0349} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> No File <==== ATTENTION
Task: {1ED8D534-6F21-452C-85B1-F2DC23266C00} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> No File <==== ATTENTION
Task: {2A76AEBA-4594-480A-BF98-2E5066E60C93} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> No File <==== ATTENTION
Task: {2C15334C-B4A2-4022-9995-B896AE6B94F4} - \Microsoft\Windows\File Classification Infrastructure\Property Definition Sync -> No File <==== ATTENTION
Task: {3AB7491E-096C-4B2E-9E8F-2E5DC32751E9} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> No File <==== ATTENTION
Task: {5AA7F8C4-6CD6-41E3-976F-ECD688D60BBB} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> No File <==== ATTENTION
Task: {68B9420E-A736-41F9-B3D9-9B0BAD90C586} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> No File <==== ATTENTION
Task: {7BB465C8-5024-4240-BEF2-4EAFFB7F8ED0} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> No File <==== ATTENTION
Task: {8F5223F8-32BF-4AC0-B58F-A08085F11CBB} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> No File <==== ATTENTION
Task: {9F30EF6D-7756-4ABA-BF19-F6360B4281BA} - System32\Tasks\{5720AC9F-2C12-4A59-8068-9EDDD10D5C28} => pcalua.exe -a "E:\###DOWNLOAD\AssassinsCreed_directorscut_1405532476\Assassin's Creed DVD9 Unprotected 1.02 EFIGS MOL EFIGS Srb Grk Slo Cro Bul\autorun.exe" -d "E:\###DOWNLOAD\AssassinsCreed_directorscut_1405532476\Assassin's Creed DVD9 Unprotected 1.02 EFIGS MOL EFIGS Srb Grk Slo Cro Bul"
Task: {E0120C79-EA93-4A21-BACC-1C20B9FB40A5} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> No File <==== ATTENTION
Task: {E2C086A7-2E87-40D1-8029-C9BE9A6941A6} - \Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd -> No File <==== ATTENTION
Task: {FF327983-79D5-46D0-9B10-424018C4F78E} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> No File <==== ATTENTION
Reg: reg delete "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\Services\WindowsMangerProtect" /f
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://isearch.omiga-plus.com/?type=hp&ts=1419672117&from=ild&uid=XXXXXXXXXXXXXX_
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://isearch.omiga-plus.com/web/?type=ds&ts=1419672117&from=ild&uid=XXXXXXXXXXXXXX_&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://isearch.omiga-plus.com/?type=hp&ts=1419672117&from=ild&uid=XXXXXXXXXXXXXX_
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://isearch.omiga-plus.com/web/?type=ds&ts=1419672117&from=ild&uid=XXXXXXXXXXXXXX_&q={searchTerms}
SearchScopes: HKLM -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://isearch.omiga-plus.com/web/?type=ds&ts=1419672117&from=ild&uid=XXXXXXXXXXXXXX_&q={searchTerms}
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?}
SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://isearch.omiga-plus.com/web/?type=ds&ts=1419672117&from=ild&uid=XXXXXXXXXXXXXX_&q={searchTerms}
S3 wfpcapture; \SystemRoot\System32\drivers\wfpcapture.sys [X]
C:\WINDOWS\Minidump\*.dmp
EmptyTemp:

Plik zapisz pod nazwą fixlist.txt i umieść obok FRST.exe
Uruchom FRST i kliknij przycisk Fix.
.

[Łowca Androidów]

Dziękuje bardzo

A co to są te "pcalua"?

[ordynat]

w największym skrócie: nieudane operacje Zaplanowanych Zadań.
Jeśli w przyszłości będą potrzebne, to same się utworzą.
Czyli usuwanie "pcalua" to w istocie kosmetyka.
.