Chciałbym się pozbyć programów pobranych przypadkowo z innymi

DeidaraKatz · 27 Czerwiec 2016 16:59

FRST: http://www.wklej.org/id/2644382/

Addition: http://www.wklej.org/id/2644393/

Schortcut: http://www.wklej.org/id/2644395/

Atis · 27 Czerwiec 2016 17:29

W panelu sterowania odinstaluj McAfee Security Scan Plus i SafeFinder.

Pobierz i uruchom AdwCleaner Kliknij Skanuj (Scan) i później Usuń (Cleaning).

Kliknij Skanuj (Scan) i pokaż nowy raport FRST i Addition.

DeidaraKatz · 27 Czerwiec 2016 18:01

FRST: http://www.wklej.org/id/2644663/

Addition: http://www.wklej.org/id/2644683/

Atis · 27 Czerwiec 2016 19:21

Wklej do systemowego notatnika i zapisz jako plik tekstowy o nazwie fixlist :

HKLM-x32…\Run: [Tv-Plug-In] => C:\Program Files (x86)\Tv-Plug-In\Tv-Plug-In.exe [312552 2015-02-24] (Orzilia Ltd.) HKU\S-1-5-21-2950430334-1277246496-72372996-1000…\Run: [Opencl] => “C:\Users\bartek\AppData\Roaming\Opencl\nircmd.exe” exec hide “C:\Users\bartek\AppData\Roaming\Opencl\start.bat” AppInit_DLLs: C:\ProgramData\Quotenamron\Y-Warm.dll => Brak pliku AppInit_DLLs-x32: C:\ProgramData\Quotenamron\Vilajob.dll => Brak pliku SearchScopes: HKLM-x32 -> DefaultScope - brak wartości CHR HomePage: Default -> hxxp://search.babylon.com/?affID=110824&tt=4312_7&babsrc=HP_ss&mntrId=f874caaa00000000000000196690114f CHR DefaultSearchURL: Default -> hxxp://feed.safefinder.biz/?fext=true&publisherid=51218&publisher=extensiondefaultap&st=ed&q={searchTerms} CHR DefaultSearchKeyword: Default -> SafeFinder CHR HKLM-x32…\Chrome\Extension: [jidkebcigjgheaahopdnlfaohgnocfai] - hxxps://clients2.google.com/service/update2/crx 2016-06-27 19:47 - 2016-01-03 14:05 - 00000000 ____D C:\AdwCleaner C:\Program Files (x86)\Tv-Plug-In C:\Users\bartek\AppData\Roaming\Opencl 2016-05-14 12:01 - 2016-05-14 12:01 - 6494208 _____ () C:\Users\bartek\AppData\Roaming\agent.dat 2015-01-21 22:37 - 2015-08-29 17:58 - 0000020 _____ () C:\Users\bartek\AppData\Roaming\appdataFr3.bin 2016-05-14 12:01 - 2016-05-14 12:00 - 0943104 _____ () C:\Users\bartek\AppData\Roaming\Betatom.exe 2016-05-14 12:01 - 2016-05-14 12:01 - 1626652 _____ () C:\Users\bartek\AppData\Roaming\Betatom.tst 2016-05-14 12:01 - 2016-05-14 12:01 - 0065232 _____ () C:\Users\bartek\AppData\Roaming\Config.xml 2016-05-14 12:00 - 2016-05-14 12:01 - 0014448 _____ () C:\Users\bartek\AppData\Roaming\InstallationConfiguration.xml 2016-05-14 12:00 - 2016-05-14 12:00 - 0127488 _____ () C:\Users\bartek\AppData\Roaming\Installer.dat 2016-05-14 12:01 - 2016-05-14 12:01 - 0018432 _____ () C:\Users\bartek\AppData\Roaming\Main.dat 2016-05-14 12:01 - 2016-05-14 12:01 - 0005568 _____ () C:\Users\bartek\AppData\Roaming\md.xml 2016-05-14 12:01 - 2016-05-14 12:01 - 0126464 _____ () C:\Users\bartek\AppData\Roaming\noah.dat 2016-05-14 12:02 - 2016-05-14 12:02 - 0032038 _____ () C:\Users\bartek\AppData\Roaming\uninstall_temp.ico 2016-05-14 12:02 - 2016-05-14 12:02 - 2279580 _____ () C:\Users\bartek\AppData\Roaming\ZerFan.bin 2014-05-11 22:34 - 2014-05-11 22:34 - 0000000 _____ () C:\Users\bartek\AppData\Local{3CAEB56F-9116-40EC-A3EA-BA0110E216CA} 2015-03-30 10:19 - 2015-03-30 10:19 - 0000000 _____ () C:\Users\bartek\AppData\Local{50E5C5CB-F7D3-471E-A95B-27E66F950AA9} Task: {027CE953-5784-43F6-A18F-57D292A51E5A} - System32\Tasks{3A502EE3-A12E-4A6C-BAA8-61F000F6930A} => pcalua.exe -a C:\Users\bartek\Desktop\maaaa\Setup.exe -d C:\Users\bartek\Desktop\maaaa Task: {11EAB149-168C-4D02-AB16-59F6DD32E0BB} - System32\Tasks{027E58E8-10E9-42C6-9222-9C7CDD33DBF0} => pcalua.exe -a C:\Users\bartek\AppData\Local\Temp\Temp1_4f19b423ef3b9.GTA_San_Andreas_-_spolszczenie[www.spolszczenia.pl].zip\gtasa_pl_0.9.exe Task: {134C64AE-85E6-4D22-9BC8-0F4DFB061FE9} - System32\Tasks{15916D74-C935-4EE3-86D2-F6F2F3D9B545} => pcalua.exe -a C:\Users\bartek\Downloads\OOB.exe -d C:\Users\bartek\Downloads Task: {15E231B8-23D6-494A-8535-80767944F3C8} - System32\Tasks{98A5F359-F603-400F-8DF9-5955AA3FC6E7} => pcalua.exe -a D:\cda_menu.exe -d D:\ Task: {20452170-6410-48B6-9EDB-98CF8094B830} - System32\Tasks{75333051-9915-4027-A862-B37BFAFBD42B} => pcalua.exe -a “C:\Program Files (x86)\Reality Pump\Two Worlds\unins000.exe” -d “C:\Program Files (x86)\Reality Pump\Two Worlds” Task: {30737FC4-E9C3-48A3-A0BE-365E1EB1B51A} - System32\Tasks{3642AFBF-1FE4-4CF5-8C4C-93A16DCFD57F} => C:\Users\bartek\Downloads\cs\cs 1.6\Counter Strike 1.6.exe Task: {333409EB-4B20-4EDB-B365-033445F8B087} - System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-2950430334-1277246496-72372996-1000 => C:\Program Files (x86)\RealNetworks\RealDownloader\realupgrade.exe Task: {3EBB420A-3467-4365-8CF0-612EBDF188D4} - System32\Tasks{731C75C7-A2B7-4028-BBA7-E811E6A2DC95} => pcalua.exe -a “C:\Program Files (x86)\InstallShield Installation Information{155F4A0E-76ED-45A2-91FB-FF2A2133C31A}\setup.exe” -c -runfromtemp -l0x0015 -removeonly Task: {5062906A-C6DA-45D2-8810-A4C9E584FE74} - System32\Tasks{3F037A1D-7AEB-4EF7-8CD4-6CB605817F3B} => pcalua.exe -a “C:\Users\bartek\Desktop\Gry\do\Fable\Fable DVD PL\directx9\DXSETUP.exe” -d “C:\Users\bartek\Desktop\Gry\do\Fable\Fable DVD PL\directx9” Task: {5FD2C7B4-EF60-4262-8BB3-AB5B3D4C8C4A} - System32\Tasks{DFA4D0D7-1966-45B4-AA42-F70F48407719} => pcalua.exe -a C:\Users\bartek\Downloads\gothic1_playerkit108k\gothic1_playerkit-1.08k\gothic1_playerkit-1.08k.exe -d C:\Users\bartek\Downloads\gothic1_playerkit108k\gothic1_playerkit-1.08k Task: {805F385B-598B-42D1-A17C-0840865093DE} - System32\Tasks{932C1F3F-10A8-4A79-B41F-924DAF32280A} => pcalua.exe -a C:\Users\bartek\Downloads\chromeinstall-8u25.exe -d C:\Users\bartek\Downloads Task: {83CA4A7A-0447-4E94-8F79-5A964E9EED90} - System32\Tasks{E767DEF5-904A-4645-B88E-A50DAF9811A6} => pcalua.exe -a C:\Users\bartek\Desktop\maaaa\Crack\mafia11-13pl.exe -d C:\Users\bartek\Desktop\maaaa\Crack Task: {841BFB95-92D6-443B-88CC-E585E193112C} - System32\Tasks{F844A7DE-09EB-4962-9D8F-92C8FA77703F} => pcalua.exe -a “C:\Users\bartek\Downloads\Rise_of_Nations_p (www.pobieralnia.pl)l.exe” -d C:\Users\bartek\Downloads Task: {84693303-AB98-4D35-B226-316EF2487D44} - System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-2950430334-1277246496-72372996-1000 => C:\Program Files (x86)\RealNetworks\RealDownloader\realupgrade.exe Task: {87E388A8-BB14-4C2A-9EB9-D6ECA3CF0AB3} - System32\Tasks{5ED7B24F-133D-4B0B-9157-21B19FDC63C2} => pcalua.exe -a C:\Users\bartek\Desktop\lol\GothicFps.exe -d C:\Users\bartek\Desktop\lol Task: {94FC42BF-5E1C-4512-89D2-7316F9DFCCF6} - System32\Tasks{3DF863D0-4A79-4B10-B900-D1444A1BCAA6} => pcalua.exe -a C:\Users\bartek\Downloads\gta3\Instalator.exe -d C:\Users\bartek\Downloads\gta3 Task: {AAA382D9-2741-40AE-B454-F3CF807EC697} - System32\Tasks{350A4758-D774-4601-B7DB-24C95BE9EC42} => pcalua.exe -a C:\Users\bartek\Downloads\GTAINSTALLER.exe -d C:\Users\bartek\Downloads Task: {CC1DD1CF-9F78-46EA-91F0-A1868C43341D} - System32\Tasks{23F8F1A2-FA73-4E3F-ABAB-7269FE5F0B14} => pcalua.exe -a D:\Autorun.exe -d D:\ Task: {CFBFD2A9-372E-4FAB-80E2-248C4E35A2CF} - System32\Tasks{0EBF055A-9A99-436F-8107-F678422EA2F4} => pcalua.exe -a C:\Users\bartek\Downloads\gothic2_playerkit-2.6f.exe -d C:\Users\bartek\Downloads Task: {D664F537-9FE7-4B6F-9A93-65404B387CBC} - System32\Tasks{DC57F4F6-5426-4D65-8D3A-4155D7D20ED0} => pcalua.exe -a “C:\Users\bartek\Desktop\gry\Nowy folder\arena\Arena106.exe” -d “C:\Users\bartek\Desktop\gry\Nowy folder\arena” Task: {D74FA99E-6AD6-4E11-8F71-E0C089EEF6BD} - System32\Tasks{26E7D09D-FD5D-498B-BD26-414D6439B282} => pcalua.exe -a D:\livebox_tp.EXE -d D:\ Task: {D90BB308-14F2-4EAE-A434-3411996755B4} - System32\Tasks{6E766B8C-8477-48A0-BC4F-01424A4331C9} => pcalua.exe -a C:\Users\bartek\Downloads\gothic1_playerkit-1.08k.exe -d C:\Users\bartek\Downloads Task: {E745A487-E708-4676-8DE0-435848782203} - System32\Tasks{4995D9F0-D50D-49E1-BD2F-C194A7F454F1} => pcalua.exe -a “C:\Program Files (x86)\InstallShield Installation Information{8CFA9151-6404-409A-AF22-4632D04582FD}\setup.exe” -c -runfromtemp -l0x0015 -removeonly Task: {FC11A897-AA30-471A-A59C-15E542EA9F4D} - System32\Tasks{7F46BB64-1192-46AD-BFD0-8FCBE08875CE} => pcalua.exe -a “C:\Users\bartek\Downloads\Fable PL\setup.exe” -d “C:\Users\bartek\Downloads\Fable PL” Task: {FD966C23-62D0-4055-BC64-DCE1C2D75F1A} - System32\Tasks{C3DBDC8F-2C8D-4C94-963E-DAF067EEACEF} => pcalua.exe -a “C:\Users\bartek\Downloads\Shockwave_Installer_Slim (1).exe” -d C:\Users\bartek\Downloads EmptyTemp:

Uruchom FRST i kliknij Napraw (Fix). Pokaż raport z usuwania Fixlog.
Kliknij Skanuj (Scan) i pokaż nowy raport z FRST bez Addition i Shortcut.

DeidaraKatz · 27 Czerwiec 2016 20:50

Fixlog: http://www.wklej.org/id/2645499/

FRST: http://www.wklej.org/id/2645510/

Atis · 27 Czerwiec 2016 22:24

Wklej do systemowego notatnika i zapisz jako plik tekstowy o nazwie fixlist :

Uruchom FRST i kliknij Napraw (Fix) Skasuj folder C:\FRST
Czyszczenie folderów Przywracania systemu
Dysk przeskanuj Malwarebytes Anti-Malware
Podczas instalacji usuń zaznaczenie przy Uruchom okres testowy Malwarebytes Anti-Malware Premium: KLIK
Przeczytaj w jaki sposób należy instalować programy: KLIK - KLIK - KLIK

Odinstaluj:

Java 7 Update 67
Java 7 Update 9
Java 8 Update 25
Java 8 Update 66
Microsoft Silverlight
Zainstaluj:

Java 8 Update 91

Silverlight 5.1.50428.0

DeidaraKatz · 28 Czerwiec 2016 09:25

Ok dzięki