Instalowanie się programów na przemian

Dla specjalistów Bezpieczeństwo
#1

Mam problem z ciągle instalującymi się dwoma programami na zmianę pierwszy to SpeedUpMyComputer & fixmyregistry. Miałem problem też z reklamami wyskakującymi w chrome ale z tym jakoś chyba sobie poradziłem. Pomocy  :-( 

#2

Do okna Własne opcje skanowania / skrypt wklej:

:OTL
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\ext@MediaViewV1alpha5472.net: C:\Program Files (x86)\MediaViewV1\MediaViewV1alpha5472\ff [2014-03-09 22:58:45 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\ext@MediaWatchV1home332.net: C:\Program Files (x86)\MediaWatchV1\MediaWatchV1home332\ff
O4:64bit:[/b] - HKLM..\Run: [Chew7Hale] "C:\Windows\System32\hale.exe" /nolog File not found
O4 - HKLM..\Run: [BEWINTERNET-PL-IEWSessionManager] "C:\Program Files (x86)\OrangeBS\BEWInternet-PL-IEW\SessionManager\SessionManager.exe" File not found
O4 - HKLM..\Run: [HOSTS Anti-Adware_PUPs] C:\Program Files (x86)\Hosts_Anti_Adwares_PUPs\HOSTS_Anti-Adware_main.exe File not found
O4 - HKU\S-1-5-21-2845838415-2007516851-3825703907-1000..\Run: [FixMyRegistry] C:\Program Files (x86)\SmartTweak\FixMyRegistry\FixMyRegistry.exe /ot /as /ss File not found
O4 - HKU\S-1-5-21-2845838415-2007516851-3825703907-1000..\Run: [SpeedUpMyComputer] C:\Program Files (x86)\SmartTweak\SpeedUpMyComputer\SpeedUpMyComputer.exe ()
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
[2014-04-04 02:52:43 | 000,000,000 | ---D | C] -- C:\ProgramData\RegClean
[2014-04-04 02:24:00 | 000,000,000 | ---D | C] -- C:\Users\Lenovo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SmartTweak Software
[2014-04-04 01:23:27 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Hosts_Anti_Adwares_PUPs
[2014-03-30 23:21:47 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\SmartTweak
[2014-03-09 22:58:34 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\MediaViewV1
[2014-04-04 02:53:57 | 000,001,264 | ---- | M] () -- C:\Users\Lenovo\Desktop\SpeedUpMyComputer.lnk
:Commands
[emptytemp]

Kliknij Wykonaj skrypt i zatwierdź restart.

Pokaż raport z usuwania i nowy log Skanuj.

#3

All processes killed
========== OTL ==========
Registry value
HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\ext@MediaViewV1alpha5472.net
deleted successfully.
C:\Program Files
(x86)\MediaViewV1\MediaViewV1alpha5472\ff\chrome\content\icons\default folder
moved successfully.
C:\Program Files
(x86)\MediaViewV1\MediaViewV1alpha5472\ff\chrome\content\icons folder moved
successfully.
C:\Program Files (x86)\MediaViewV1\MediaViewV1alpha5472\ff\chrome\content
folder moved successfully.
C:\Program Files (x86)\MediaViewV1\MediaViewV1alpha5472\ff\chrome folder
moved successfully.
C:\Program Files (x86)\MediaViewV1\MediaViewV1alpha5472\ff folder moved
successfully.
Registry value
HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\ext@MediaWatchV1home332.net
deleted successfully.
File C:\Program Files (x86)\MediaWatchV1\MediaWatchV1home332\ff not
found.
Registry value
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\BEWINTERNET-PL-IEWSessionManager
deleted successfully.
Registry value
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\HOSTS
Anti-Adware_PUPs deleted successfully.
Registry value
HKEY_USERS\S-1-5-21-2845838415-2007516851-3825703907-1000\Software\Microsoft\Windows\CurrentVersion\Run\FixMyRegistry
deleted successfully.
Registry value
HKEY_USERS\S-1-5-21-2845838415-2007516851-3825703907-1000\Software\Microsoft\Windows\CurrentVersion\Run\SpeedUpMyComputer
deleted successfully.
C:\Program Files (x86)\SmartTweak\SpeedUpMyComputer\SpeedUpMyComputer.exe
moved successfully.
Registry value
HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\RunOnce\mctadmin
deleted successfully.
Registry value
HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\RunOnce\mctadmin
deleted successfully.
C:\ProgramData\RegClean\Logs folder moved successfully.
C:\ProgramData\RegClean\Backups folder moved successfully.
C:\ProgramData\RegClean folder moved successfully.
C:\Users\Lenovo\AppData\Roaming\Microsoft\Windows\Start
Menu\Programs\SmartTweak Software\SpeedUpMyComputer folder moved
successfully.
C:\Users\Lenovo\AppData\Roaming\Microsoft\Windows\Start
Menu\Programs\SmartTweak Software folder moved successfully.
C:\Program Files (x86)\Hosts_Anti_Adwares_PUPs folder moved
successfully.
C:\Program Files (x86)\SmartTweak\SpeedUpMyComputer folder moved
successfully.
C:\Program Files (x86)\SmartTweak folder moved successfully.
C:\Program Files (x86)\MediaViewV1\MediaViewV1alpha7627\ie folder moved
successfully.
C:\Program Files (x86)\MediaViewV1\MediaViewV1alpha7627 folder moved
successfully.
C:\Program Files (x86)\MediaViewV1\MediaViewV1alpha5472\ie folder moved
successfully.
C:\Program Files (x86)\MediaViewV1\MediaViewV1alpha5472\ch folder moved
successfully.
C:\Program Files (x86)\MediaViewV1\MediaViewV1alpha5472 folder moved
successfully.
C:\Program Files (x86)\MediaViewV1 folder moved successfully.
C:\Users\Lenovo\Desktop\SpeedUpMyComputer.lnk moved successfully.
========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Lenovo
->Temp folder emptied: 2014857064 bytes
->Temporary Internet Files folder emptied: 42359093 bytes
->Java cache emptied: 76220291 bytes
->Google Chrome cache emptied: 621863780 bytes
->Flash cache emptied: 2795 bytes

User: Public

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 77042267 bytes
%systemroot%\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary
Internet Files folder emptied: 7403049 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary
Internet Files folder emptied: 43223367 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 2 749,00 mb

OTL by OldTimer - Version 3.2.69.0 log created on 04042014_094801

Files\Folders moved on Reboot…
C:\Users\Lenovo\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved
successfully.
C:\Users\Lenovo\AppData\Local\Microsoft\Windows\Temporary Internet
Files\counters.dat moved successfully.

PendingFileRenameOperations files…

Registry entries deleted on Reboot…

 

taka wiadomość od razu po włączeniu PC

Skan.

OTL.Txt http://wklej.to/oCaoj

Extras.Txt http://wklej.to/kSwav

#4

Wklej i kliknij Wykonaj skrypt:

:OTL
O4:64bit: - HKLM..\Run: [Chew7Hale] "C:\Windows\System32\hale.exe" /nolog File not found
[2014-04-04 00:05:58 | 000,000,000 | ---D | C] -- C:\AdwCleaner
[2014-03-23 13:35:20 | 000,000,159 | ---- | M] () -- C:\extensions.ini

Uruchom OTL i kliknij Sprzątanie.

Usuń stare punkty przywracania:

Aby usunąć wszystkie punkty przywracania

Uruchom SecurityCheck i aktualizuj programy oznaczone jako Out of date

Dysk przeskanuj Malwarebytes Anti-Malware

Podczas instalacji usuń zaznaczenie przy Uruchom okres testowy Malwarebytes Anti-Malware Premium.

http://wstaw.org/m/2014/03/25/2014-03-25_123039.png

Język PL > Settings > General Settings > Language > Polish

#5

 SecurityCheck

#6

Przenieś wykryte zagrożenia do kwarantanny i to wszystko.

#7

wielkie dzięki :slight_smile: