Witam. Sprawa wygląda tak że przypadkowo zainstalowałem niechciany program (Spy Hunter 4), niestety nie można go teraz odinstalować. Co robić ? Jestem otwarty na wszelkie porady i wkazowki
dwa ostatnie komentarze do pierwszej odpowiedzi:
Nie potrafisz czytać i dlatego logi zamieściłeś w postaci załączników?
Wklej do systemowego notatnika i zapisz jako plik tekstowy o nazwie fixlist :
CloseProcesses:
HKLM-x32\...\Run: [] => [X]
AppInit_DLLs: C:\ProgramData\Opejob\Opetip.dll => C:\ProgramData\Opejob\Opetip.dll [883200 2015-09-05] ()
AppInit_DLLs-x32: C:\ProgramData\Opejob\Ittraxstock.dll => C:\ProgramData\Opejob\Ittraxstock.dll [738816 2015-09-05] ()
ShellIconOverlayIdentifiers: [###MegaShellExtPending] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\ProgramData\MEGAsync\ShellExtX64.dll Brak pliku
ShellIconOverlayIdentifiers: [###MegaShellExtSynced] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\ProgramData\MEGAsync\ShellExtX64.dll Brak pliku
ShellIconOverlayIdentifiers: [###MegaShellExtSyncing] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\ProgramData\MEGAsync\ShellExtX64.dll Brak pliku
ShellIconOverlayIdentifiers: [SugarSyncBackedUp] -> {0C4A258A-3F3B-4FFF-80A7-9B3BEC139472} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll Brak pliku
ShellIconOverlayIdentifiers: [SugarSyncPending] -> {62CCD8E3-9C21-41E1-B55E-1E26DFC68511} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll Brak pliku
ShellIconOverlayIdentifiers: [SugarSyncRoot] -> {A759AFF6-5851-457D-A540-F4ECED148351} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll Brak pliku
ShellIconOverlayIdentifiers: [SugarSyncShared] -> {1574C9EF-7D58-488F-B358-8B78C1538F51} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll Brak pliku
ShellIconOverlayIdentifiers-x32: [###MegaShellExtPending] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\ProgramData\MEGAsync\ShellExtX32.dll Brak pliku
ShellIconOverlayIdentifiers-x32: [###MegaShellExtSynced] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\ProgramData\MEGAsync\ShellExtX32.dll Brak pliku
ShellIconOverlayIdentifiers-x32: [###MegaShellExtSyncing] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\ProgramData\MEGAsync\ShellExtX32.dll Brak pliku
HKU\S-1-5-21-3439423560-372353971-3419584182-1002\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBPxn49PYmQ6e1krQXBFZY3csSTHA9fTmZjl-DPlHTRGK6e0MUicS5cYXyhvJZfDNsW8wtUp7buppd8RbzTb9clmbE16fhKc0zjNPWx4teMkgvKca7-PrnSaYyocqRApDdBnAvZltqyfqq3D-t15KDnjHp-0wcueoenHg,,&q={searchTerms}
HKU\S-1-5-21-3439423560-372353971-3419584182-1002\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://%66%65%65%64.%73%6E%61%70%64%6F.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBPxn49PYmQ6e1krQXBFZY3csSTHA9fTmZjl-DPlHTRGK6e0MUicS5cYXyhvJZfDNsW8wtUp7buppd8RbzTb9clmb08bkI4SsvU8l6hVbfp7oWisaMt74Sp8XgaRgOR9v3MWTGRsmRKJ-6gfQ1HcsppheFOzZZswbETGw,,
HKU\S-1-5-21-3439423560-372353971-3419584182-1002\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBPxn49PYmQ6e1krQXBFZY3csSTHA9fTmZjl-DPlHTRGK6e0MUicS5cYXyhvJZfDNsW8wtUp7buppd8RbzTb9clmbE16fhKc0zjNPWx4teMkgvKca7-PrnSaYyocqRApDdBnAvZltqyfqq3D-t15KDnjHp-0wcueoenHg,,&q={searchTerms}
HKU\S-1-5-21-3439423560-372353971-3419584182-1002\Software\Microsoft\Internet Explorer\Main,SearchAssistant = hxxp://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBPxn49PYmQ6e1krQXBFZY3csSTHA9fTmZjl-DPlHTRGK6e0MUicS5cYXyhvJZfDNsW8wtUp7buppd8RbzTb9clmbE16fhKc0zjNPWx4teMkgvKca7-PrnSaYyocqRApDdBnAvZltqyfqq3D-t15KDnjHp-0wcueoenHg,,&q={searchTerms}
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> DefaultScope {ielnksrch} URL =
SearchScopes: HKLM-x32 -> ielnksrch URL = hxxp://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBPxn49PYmQ6e1krQXBFZY3csSTHA9fTmZjl-DPlHTRGK6e0MUicS5cYXyhvJZfDNsW8wtUp7buppd8RbzTb9clmbE16fhKc0zjNPWx4teMkgvKca7-PrnSaYyocqRApDdBnAvZltqyfqq3D-t15KDnjHp-0wcueoenHg,,&q={searchTerms}
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-3439423560-372353971-3419584182-1002 -> {ielnksrch} URL = hxxp://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBPxn49PYmQ6e1krQXBFZY3csSTHA9fTmZjl-DPlHTRGK6e0MUicS5cYXyhvJZfDNsW8wtUp7buppd8RbzTb9clmbE16fhKc0zjNPWx4teMkgvKca7-PrnSaYyocqRApDdBnAvZltqyfqq3D-t15KDnjHp-0wcueoenHg,,&q={searchTerms}
FF NewTab: C:\\ProgramData\\Opejobs\\ff.NT
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
S4 SpyHunter 4 Service; C:\Program Files\Enigma Software Group\SpyHunter\SH4Service.exe [1026944 2015-09-05] (Enigma Software Group USA, LLC.)
S3 SmbDrvI; \SystemRoot\system32\DRIVERS\Smb_driver_Intel.sys [X]
S1 tcfd_vw_1_10_0_22; system32\drivers\tcfd_vw_1_10_0_22.sys [X]
R3 esgiguard; C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [15920 2015-09-05] (Enigma Software Group USA, LLC.)
S3 EsgScanner; C:\Windows\System32\DRIVERS\EsgScanner.sys [22704 2015-09-05] ()
2015-09-09 15:06 - 2015-07-13 21:10 - 00411455 _____ C:\WINDOWS\system32\ApnDatabase.xml
C:\Program Files\Enigma Software Group
C:\Windows\System32\DRIVERS\EsgScanner.sys
C:\ProgramData\Opejob
Task: {E51CE374-48AC-4BCE-8209-3A427C33CD4D} - System32\Tasks\SpyHunter4Startup => C:\Program Files\Enigma Software Group\SpyHunter\Spyhunter4.exe [2015-09-05] (Enigma Software Group USA, LLC.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcpltsvc => ""=""
EmptyTemp:
Uruchom FRST i kliknij Napraw (Fix). Pokaż raport z usuwania Fixlog.
Ok dzięki już ogarnąłem :)