Po zainstalowaniu Adobe Reader, problem z omiga plus oraz search protect

Dla specjalistów Bezpieczeństwo
#1

Dzień dobry. 

#2

Odinstaluj Adobe Reader 9.5.0 - Polish.Otwórz notatnik systemowy i wklej:

Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3208515226-2010266281-175035788-1001Core.job = C:\Users\samsung\AppData\Local\Facebook\Update\FacebookUpdate.exe
HKLM\...\Run: [RtHDVCpl] = C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11613288 2010-11-17] (Realtek Semiconductor)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] = C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe [37296 2012-01-03] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe ARM] = C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [843712 2012-01-02] (Adobe Systems Incorporated)
AppInit_DLLs: C:\PROGRA~2\SUPPOR~1\SUPPOR~2.DLL = C:\PROGRA~2\SUPPOR~1\SUPPOR~2.DLL File Not Found
ShellIconOverlayIdentifiers: [00avast] - {472083B0-C522-11CF-8763-00608CC02F24} = No File
GroupPolicy: Group Policy on Chrome detected ======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction ======= ATTENTION
SearchScopes: HKU\S-1-5-21-3208515226-2010266281-175035788-1001 - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL =
SearchScopes: HKU\S-1-5-21-3208515226-2010266281-175035788-1001 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://isearch.omiga-plus.com/web/?utm_source=butm_medium=corutm_campaign=install_ieutm_content=dsfrom=coruid=SAMSUNGXHM321HI_S2HZJ9DB202683ts=1422658915type=defaultq={searchTerms}
SearchScopes: HKU\S-1-5-21-3208515226-2010266281-175035788-1001 - {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} URL = http://isearch.omiga-plus.com/web/?utm_source=butm_medium=corutm_campaign=install_ieutm_content=dsfrom=coruid=SAMSUNGXHM321HI_S2HZJ9DB202683ts=1422658915type=defaultq={searchTerms}
SearchScopes: HKU\S-1-5-21-3208515226-2010266281-175035788-1001 - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://isearch.omiga-plus.com/web/?utm_source=butm_medium=corutm_campaign=install_ieutm_content=dsfrom=coruid=SAMSUNGXHM321HI_S2HZJ9DB202683ts=1422658915type=defaultq={searchTerms}
SearchScopes: HKU\S-1-5-21-3208515226-2010266281-175035788-1001 - {78EA9F37-9279-4A9C-BF4F-E4747A6DF668} URL = http://isearch.omiga-plus.com/web/?utm_source=butm_medium=corutm_campaign=install_ieutm_content=dsfrom=coruid=SAMSUNGXHM321HI_S2HZJ9DB202683ts=1422658915type=defaultq={searchTerms}
SearchScopes: HKU\S-1-5-21-3208515226-2010266281-175035788-1001 - {E733165D-CBCF-4FDA-883E-ADEF965B476C} URL = http://isearch.omiga-plus.com/web/?utm_source=butm_medium=corutm_campaign=install_ieutm_content=dsfrom=coruid=SAMSUNGXHM321HI_S2HZJ9DB202683ts=1422658915type=defaultq={searchTerms}
StartMenuInternet: IEXPLORE.EXE - iexplore.exe
FF Plugin HKU\S-1-5-21-3208515226-2010266281-175035788-1001: @tools.google.com/Google Update;version=3 - C:\Users\samsung\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll No File
FF Plugin HKU\S-1-5-21-3208515226-2010266281-175035788-1001: @tools.google.com/Google Update;version=9 - C:\Users\samsung\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll No File
CHR Extension: (cosstminn) - C:\Users\samsung\AppData\Local\Google\Chrome\User Data\Default\Extensions\jlkkdofhimohjhiphhhajclegimobghi [2014-08-26]
U3 ayf50vy4; C:\Windows\System32\Drivers\ayf50vy4.sys [0] (Intel Corporation) ==== ATTENTION (zero size file/folder)
EmptyTemp:

Plik zapisz pod nazwą fixlist.txt i umieść obok FRST w tym samym folderze.