Nie mogę zainstalować żadnego antywirusa

Dla specjalistów Bezpieczeństwo
#1

Witam wszystkich.

Wczoraj postanowiłem zmienić swojego antywirusa z Panda Cloud na AVG. Gdy odinstalowałem Panda Cloud i próbowałem zainstalowac AVG pojawił się błąd. Próbowałem takgże zainstalowac inne programy antyvirusowe ale też się nie da :confused:

 

Logi z OTL:

http://www.wklej.org/id/1331291/

 

 

#2

Po pierwsze na forum korzystamy z logów OTL: http://forum.dobreprogramy.pl/analiza-i-dezynfekcja-zestaw-narzędzi-nieingerencyjnych-t402063/#p3059741

Po drugie, zapoznaj się z zasadami wklejania logów na forum: http://forum.dobreprogramy.pl/obowiązkowe-logi-t208287/ a następnie, korzystając z przycisku Edytuj i opcji Użyj pełnego edytora , dokonaj korekty postu.

#3

Z jakiej strony pobierasz antywirusy?

#4

Z oficjalnych albo dobreprogramy.pl

#5 
"{F585058F-3348-4640-9742-B5797416A1E3}" = AVG 2014

AVG jest zainstalowany. Usuń folder tego programu w Program Files.

bearsharemusicboxtoolbar181CR" = Music Toolbar for Chrome (Dist. by Musiclab, Inc.)
"bearsharemusicboxtoolbar181IE" = Music Toolbar for Internet Explorer (Dist. by Musiclab, Inc.)
"delta" = Delta toolbar  
"Delta Chrome Toolbar" = Delta Chrome Toolbar
"incredibar" = Incredibar Toolbar on IE
"kmpmediatoolbar" = KMP Media Toolbar
"StartNow Toolbar" = StartNow Toolbar
"{6e5fcd7c-d8da-46ab-bbe5-3bd8e708eb4c}" = Linkury Smartbar Engine
"{86D4B82A-ABED-442A-BE86-96357B70F4FE}" = Ask Toolbar

Odinstaluj TE programy. Najlepiej programem Revo Uinstalater.

#6

Odinstaluj Web Assistant 2.0.0.572,ContinueToSave,Yontoo 1.10.02,Qtrax Player,BabylonObjectInstaller,Ask Toolbar,Music Toolbar for Chrome (Dist. by Musiclab, Inc.),Music Toolbar for Internet Explorer (Dist. by Musiclab, Inc.),Delta toolbar,Delta Chrome Toolbar,Funmoods on IE and Chrome,GadgetBox,Incredibar Toolbar  on IE,KMP Media Toolbar,LiveVDO plugin 1.3,OptimizerPro Updater,Search Assistant SoftQuick 1.66,StartNow Toolbar,TheBflix Updater.Użyj AdwCleaner http://www.bleepingcomputer.com/download/adwcleaner/ z funkcji Skan(Szukaj) a następnie Clean(usuń) (w przypadku Visty/Windows7 uruchom z prawokliku jako Administrator).

Pokaż nowy OTL.txt

#7

Bardzo dziękuje wszystko działa :slight_smile:

#8

To jeszcze nie wszystko 

Pokaż nowy OTL.txt
#9

Przepraszam że tak długo ale wczoraj nie zdążyłem.

 

Proszę:

http://www.wklej.org/id/1332158/

#10

Odinstaluj Avasta i Kasperskiego.Uruchom OTL i w okno (Własne opcje skanowania/Script)wklej:

:OTL
SRV - [2013-08-30 09:16:42 | 003,233,806 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\Tor\tor.exe -- (tor)
DRV:64bit: - [2013-02-19 11:50:15 | 000,039,768 | ---- | M] (AVG Technologies) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\avgtpx64.sys -- (avgtp)
DRV - [2014-04-07 10:12:48 | 000,036,248 | ---- | M] (Musiclab LLC) [Kernel | System | Running] -- C:\Program Files (x86)\Music Toolbar\Datamngr\x64\setmgrc1.cfg -- (F06DEFF2-5B9C-490D-910F-35D3A91196222)
IE:64bit: - HKLM\..\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2002}: "URL" = http://dts.search.ask.com/sr?src=iebgct=dsappid=1427systemid=2v=a12281-302apn_uid=0310262267324050apn_dtid=IME002o=APN10641apn_ptnrs=AG2q={searchTerms}
IE - HKLM\..\URLSearchHook: - No CLSID value found
IE - HKLM\..\URLSearchHook: {3B81079D-2AC9-425f-A494-A1C7D93AFA3C} - SOFTWARE\Classes\CLSID\{3B81079D-2AC9-425f-A494-A1C7D93AFA3C}\InprocServer32 File not found
IE - HKLM\..\URLSearchHook: {b12785f5-d8d0-4530-a3ea-5c4263b85bef} - No CLSID value found
IE - HKLM\..\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2002}: "URL" = http://dts.search.ask.com/sr?src=iebgct=dsappid=1427systemid=2v=a12281-302apn_uid=0310262267324050apn_dtid=IME002o=APN10641apn_ptnrs=AG2q={searchTerms}
IE - HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\Main,bProtector Start Page = http://www1.delta-search.com/?babsrc=HP_ssmntrId=445750E549C241E6affID=119357tsp=4981
IE - HKU\S-1-5-18\SOFTWARE\Microsoft\Internet Explorer\Main,bProtector Start Page = http://www1.delta-search.com/?babsrc=HP_ssmntrId=445750E549C241E6affID=119357tsp=4981
IE - HKU\S-1-5-21-4029484172-2028394421-1362271858-1000\..\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2002}: "URL" = http://dts.search.ask.com/sr?src=iebgct=dsappid=1427systemid=2v=a12281-302apn_uid=0310262267324050apn_dtid=IME002o=APN10641apn_ptnrs=AG2q={searchTerms}
IE - HKU\S-1-5-21-4029484172-2028394421-1362271858-1000\..\SearchScopes\15DA0FE1F1D34C3EADE8ACFABDD5F207: "URL" = http://feed.helperbar.com/?publisher=OCdpid=OCco=PLuserid=12c2d64d-80f4-485e-9406-4c7eb652de6faffid=111583searchtype=dsbabsrc=lnkryq={searchTerms}installDate=01/01/1970
[2012-06-30 18:11:42 | 000,000,000 | ---D | M] (uTorrentControl2 Community Toolbar) -- C:\Users\qwerty\AppData\Roaming\mozilla\Firefox\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}
O2 - BHO: (continuetosave) - {3529D146-8369-0D00-0281-39A820E8295D} - C:\ProgramData\continuetosave\50df0860219bc.dll File not found
O2 - BHO: (no name) - {b12785f5-d8d0-4530-a3ea-5c4263b85bef} - No CLSID value found.
O2 - BHO: (no name) - {cfc3366e-c743-48b5-a136-642e86be865e} - No CLSID value found.
O2 - BHO: (KMP Media Toolbar) - {daf5b34c-1aa3-4c33-ae24-766a370635d2} - C:\Program Files (x86)\kmpmediatoolbar\searchresultsDx.dll (Ask.com)
O3:64bit: - HKLM\..\Toolbar: (Music Toolbar (Dist. by Musiclab, Inc.)) - {cfc3366e-c743-48b5-a136-642e86be865e} - C:\PROGRA~2\MUSICT~1\Datamngr\SRTOOL~1\IE\searchresultsDx64.dll ()
O3:64bit: - HKLM\..\Toolbar: (no name) - 10 - No CLSID value found.
O3 - HKLM\..\Toolbar: (GagetBox) - {3B81079D-2AC9-425f-A494-A1C7D93AFA3C} - C:\Program Files (x86)\GadgetBox\gadgetBoxTB.dll File not found
O3 - HKLM\..\Toolbar: (no name) - {41B62AD3-5D43-40D1-9D43-F3539C1DB452} - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - {cfc3366e-c743-48b5-a136-642e86be865e} - No CLSID value found.
O3 - HKLM\..\Toolbar: (KMP Media Toolbar) - {daf5b34c-1aa3-4c33-ae24-766a370635d2} - C:\Program Files (x86)\kmpmediatoolbar\searchresultsDx.dll (Ask.com)
O3 - HKLM\..\Toolbar: (no name) - 10 - No CLSID value found.
O4 - HKU\S-1-5-21-4029484172-2028394421-1362271858-1000..\Run: [AdobeBridge] File not found
O4 - HKU\.DEFAULT..\RunOnce: [panda4_1dn] reg.exe delete "HKCU\Software\AppDataLow\Software\panda4_1dn" /f File not found
O4 - HKU\.DEFAULT..\RunOnce: [panda4_1dn_XP] reg.exe delete "HKCU\Software\panda4_1dn" /f File not found
O4 - HKU\S-1-5-18..\RunOnce: [panda4_1dn] reg.exe delete "HKCU\Software\AppDataLow\Software\panda4_1dn" /f File not found
O4 - HKU\S-1-5-18..\RunOnce: [panda4_1dn_XP] reg.exe delete "HKCU\Software\panda4_1dn" /f File not found
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O27:64bit: - HKLM IFEO\bpsvc.exe: Debugger - C:\Windows\SysNative\tasklist.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\browsersafeguard.exe: Debugger - C:\Windows\SysNative\tasklist.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\dprotectsvc.exe: Debugger - C:\Windows\SysNative\tasklist.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\jumpflip: Debugger - C:\Windows\SysNative\tasklist.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\protectedsearch.exe: Debugger - C:\Windows\SysNative\tasklist.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\searchinstaller.exe: Debugger - C:\Windows\SysNative\tasklist.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\searchprotection.exe: Debugger - C:\Windows\SysNative\tasklist.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\searchprotector.exe: Debugger - C:\Windows\SysNative\tasklist.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\searchsettings.exe: Debugger - C:\Windows\SysNative\tasklist.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\searchsettings64.exe: Debugger - C:\Windows\SysNative\tasklist.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\snapdo.exe: Debugger - C:\Windows\SysNative\tasklist.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\stinst32.exe: Debugger - C:\Windows\SysNative\tasklist.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\stinst64.exe: Debugger - C:\Windows\SysNative\tasklist.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\umbrella.exe: Debugger - C:\Windows\SysNative\tasklist.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\utiljumpflip.exe: Debugger - C:\Windows\SysNative\tasklist.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\volaro: Debugger - C:\Windows\SysNative\tasklist.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\vonteera: Debugger - C:\Windows\SysNative\tasklist.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\websteroids.exe: Debugger - C:\Windows\SysNative\tasklist.exe (Microsoft Corporation)
O27:64bit: - HKLM IFEO\websteroidsservice.exe: Debugger - C:\Windows\SysNative\tasklist.exe (Microsoft Corporation)
O27 - HKLM IFEO\bpsvc.exe: Debugger - C:\Windows\SysWow64\tasklist.exe (Microsoft Corporation)
O27 - HKLM IFEO\browsersafeguard.exe: Debugger - C:\Windows\SysWow64\tasklist.exe (Microsoft Corporation)
O27 - HKLM IFEO\dprotectsvc.exe: Debugger - C:\Windows\SysWow64\tasklist.exe (Microsoft Corporation)
O27 - HKLM IFEO\jumpflip: Debugger - C:\Windows\SysWow64\tasklist.exe (Microsoft Corporation)
O27 - HKLM IFEO\protectedsearch.exe: Debugger - C:\Windows\SysWow64\tasklist.exe (Microsoft Corporation)
O27 - HKLM IFEO\searchinstaller.exe: Debugger - C:\Windows\SysWow64\tasklist.exe (Microsoft Corporation)
O27 - HKLM IFEO\searchprotection.exe: Debugger - C:\Windows\SysWow64\tasklist.exe (Microsoft Corporation)
O27 - HKLM IFEO\searchprotector.exe: Debugger - C:\Windows\SysWow64\tasklist.exe (Microsoft Corporation)
O27 - HKLM IFEO\searchsettings.exe: Debugger - C:\Windows\SysWow64\tasklist.exe (Microsoft Corporation)
O27 - HKLM IFEO\searchsettings64.exe: Debugger - C:\Windows\SysWow64\tasklist.exe (Microsoft Corporation)
O27 - HKLM IFEO\snapdo.exe: Debugger - C:\Windows\SysWow64\tasklist.exe (Microsoft Corporation)
O27 - HKLM IFEO\stinst32.exe: Debugger - C:\Windows\SysWow64\tasklist.exe (Microsoft Corporation)
O27 - HKLM IFEO\stinst64.exe: Debugger - C:\Windows\SysWow64\tasklist.exe (Microsoft Corporation)
O27 - HKLM IFEO\umbrella.exe: Debugger - C:\Windows\SysWow64\tasklist.exe (Microsoft Corporation)
O27 - HKLM IFEO\utiljumpflip.exe: Debugger - C:\Windows\SysWow64\tasklist.exe (Microsoft Corporation)
O27 - HKLM IFEO\volaro: Debugger - C:\Windows\SysWow64\tasklist.exe (Microsoft Corporation)
O27 - HKLM IFEO\vonteera: Debugger - C:\Windows\SysWow64\tasklist.exe (Microsoft Corporation)
O27 - HKLM IFEO\websteroids.exe: Debugger - C:\Windows\SysWow64\tasklist.exe (Microsoft Corporation)
O27 - HKLM IFEO\websteroidsservice.exe: Debugger - C:\Windows\SysWow64\tasklist.exe (Microsoft Corporation)
O36 - AppCertDlls: x64 - (c:\program files (x86)\music toolbar\datamngr\x64\apcrtldr.dll) - c:\program files (x86)\music toolbar\datamngr\x64\apcrtldr.dll ()
O36 - AppCertDlls: x86 - (c:\program files (x86)\music toolbar\datamngr\apcrtldr.dll) - c:\program files (x86)\music toolbar\datamngr\apcrtldr.dll ()
[2014-03-30 08:55:44 | 000,000,000 | ---D | C] -- C:\Users\qwerty\AppData\Local\bearsharemusicboxtoolbar181
[2014-03-30 08:55:29 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Music Toolbar
[2014-03-30 08:53:41 | 000,000,000 | ---D | C] -- C:\Users\qwerty\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SmartTweak Software
[2014-03-30 08:53:41 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\SmartTweak
[2014-04-14 15:18:58 | 000,000,438 | -H-- | M] () -- C:\Windows\tasks\GadgetBox UpdaterUpdaterTask{B49AFD98-E2CA-4839-8AC8-52B2E5254C92}.job
[2014-04-14 15:18:58 | 000,000,438 | -H-- | M] () -- C:\Windows\tasks\GadgetBox UpdaterUpdaterTask{00F23011-496C-44DA-AEF2-BC8F221B1D9C}.job
[2014-04-12 19:47:06 | 000,000,294 | ---- | M] () -- C:\Windows\tasks\DLL-files.com Fixer_UPDATES.job
[2014-04-03 13:28:46 | 000,000,278 | ---- | M] () -- C:\Windows\tasks\DLL-files.com Fixer_MONTHLY.job

:Commands
[emptytemp]

Kliknij Wykonaj skrypt.Po restarcie uruchom OTL i użyj opcji Sprzątanie.

Przeskanuj programem Malwarebytes Anti-Malware http://data-cdn.mbamupdates.com/v2/mbam/consumer/data/mbam-setup-2.0.0.1000.exe

#11

Jakim programem mam odinstalowac Avasta i Kasperskiego? ponieważ programem Revo Uninstaller nie mogę go znajść.

#12

avasta zobacz tym 

http://www.avast.com/pl-pl/uninstall-utility

#13

Ale ja nie mam nigdzie avasta na komputerze. Szukałem.

#14

Nie szukaj tylko uruchom avastclear.

kavremover:

http://support.kaspersky.com/pl/common/service

#15

Wszystko zrobiłem wedle zaleceń. Mam jeszcze jedno pytanie. Czy moglibyście doradzić jakimi programami czyścić czy też skanowac komputer systematycznie aby unikać takich sytuacji jak ta lub innych zagrożeń?

#16

Nie wyrażaj zgody na instalację szkodliwych dodatków.

Przeczytaj w jaki sposób należy instalować programy: KLIK - KLIK - KLIK - KLIK

Do skanowania masz AdwCleaner i Malwarebytes.