Witam! Po zainstalowaniu spyhunter 4 nie mogę go odinstalować. NIestety nie mogę go odinstalować normalnie. Proszę o pomoc. Załączam logi z FRST
Odinstaluj Adblock Plus 1.4 - Internet Explorer Packages,McAfee Security Scan Plus.Otwórz notatnik systemowy i wklej:
Task: {7E5D6291-7B1C-4639-AD57-4F19E7BB721C} - System32\Tasks\SpyHunter4Startup = C:\Program Files\Enigma Software Group\SpyHunter\Spyhunter4.exe [2015-04-20] (Enigma Software Group USA, LLC.)
HKLM\...\Run: [RtHDVCpl] = C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13667032 2014-02-24] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] = C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1381744 2014-02-25] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_LENOVO_DOLBYDRAGON] = C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1381744 2014-02-25] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_LENOVO_MICPKEY] = C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1381744 2014-02-25] (Realtek Semiconductor)
HKLM\...\Run: [BtServer] = C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTServer.exe [280576 2013-10-21] (Realtek Semiconductor Corporation)
HKLM\...\Policies\Explorer: [NoFolderOptions] 0
HKLM\...\Policies\Explorer: [NoControlPanel] 0
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk [2015-04-01]
ShortcutTarget: McAfee Security Scan Plus.lnk - C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe (McAfee, Inc.)
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.sweet-page.com/web/?type=dsts=1427737150from=coruid=ST500LM000-SSHD-8GB_W7612NM0XXXXW7612NM0q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://www.sweet-page.com/web/?type=dsts=1427737150from=coruid=ST500LM000-SSHD-8GB_W7612NM0XXXXW7612NM0q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.sweet-page.com/web/?type=dsts=1427737150from=coruid=ST500LM000-SSHD-8GB_W7612NM0XXXXW7612NM0q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.sweet-page.com/web/?type=dsts=1427737150from=coruid=ST500LM000-SSHD-8GB_W7612NM0XXXXW7612NM0q={searchTerms}
HKU\S-1-5-21-1634203649-2597395812-655102541-1001\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
SearchScopes: HKLM - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-1634203649-2597395812-655102541-1001 - DefaultScope {E733165D-CBCF-4FDA-883E-ADEF965B476C} URL = http://www.sweet-page.com/web/?utm_source=butm_medium=corutm_campaign=install_ieutm_content=dsfrom=coruid=ST500LM000-SSHD-8GB_W7612NM0XXXXW7612NM0ts=1427737170type=defaultq={searchTerms}
SearchScopes: HKU\S-1-5-21-1634203649-2597395812-655102541-1001 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://www.sweet-page.com/web/?utm_source=butm_medium=corutm_campaign=install_ieutm_content=dsfrom=coruid=ST500LM000-SSHD-8GB_W7612NM0XXXXW7612NM0ts=1427737170type=defaultq={searchTerms}
SearchScopes: HKU\S-1-5-21-1634203649-2597395812-655102541-1001 - {763B6FBB-C8E5-408D-9535-4210C0C9F890} URL = http://www.sweet-page.com/web/?utm_source=butm_medium=corutm_campaign=install_ieutm_content=dsfrom=coruid=ST500LM000-SSHD-8GB_W7612NM0XXXXW7612NM0ts=1427737170type=defaultq={searchTerms}
SearchScopes: HKU\S-1-5-21-1634203649-2597395812-655102541-1001 - {E733165D-CBCF-4FDA-883E-ADEF965B476C} URL = http://www.sweet-page.com/web/?utm_source=butm_medium=corutm_campaign=install_ieutm_content=dsfrom=coruid=ST500LM000-SSHD-8GB_W7612NM0XXXXW7612NM0ts=1427737170type=defaultq={searchTerms}
BHO-x32: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.8.150\McAfeeMSS_IE.dll [2014-04-09] (McAfee, Inc.)
BHO-x32: IETabPage Class - {3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C} - C:\Program Files (x86)\XTab\SupTab.dll [2015-01-16] (Thinknice Co. Limited)
BHO-x32: Digital More - {c0b1016f-b7e5-46f0-b415-6bf9e55ab00d} - C:\Program Files (x86)\Digital More\Extensions\c0b1016f-b7e5-46f0-b415-6bf9e55ab00d.dll No File
BHO-x32: browse pulse - {ed8e593d-1965-4e45-9d55-d56162dcde14} - C:\Program Files (x86)\browse pulse\Extensions\ed8e593d-1965-4e45-9d55-d56162dcde14.dll No File
FF Extension: Digital More - C:\Users\Joanna\AppData\Roaming\Mozilla\Firefox\Profiles\eai0u2mz.default\Extensions\{bc1f498e-2a46-489a-b4e8-54621ed44de5}.xpi [2015-04-19]
FF HKU\S-1-5-21-1634203649-2597395812-655102541-1001\...\Firefox\Extensions: [{e4f94d1e-2f53-401e-8885-681602c0ddd8}] - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi
FF Extension: McAfee Security Scan Plus - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi [2014-04-04]
R2 IHProtect Service; C:\Program Files (x86)\XTab\ProtectService.exe [158896 2015-01-16] (XTab system)
S2 SpyHunter 4 Service; C:\Program Files\Enigma Software Group\SpyHunter\SH4Service.exe [1026432 2015-04-20] (Enigma Software Group USA, LLC.)
R2 WindowsMangerProtect; C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe [493712 2015-03-30] (SysTool PasSame LIMITED)
R3 esgiguard; C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [15920 2015-04-20] (Enigma Software Group USA, LLC.)
S3 EsgScanner; C:\Windows\System32\DRIVERS\EsgScanner.sys [22704 2015-04-20] ()
2015-04-20 23:08 - 2015-04-20 23:08 - 00000000 _____ () C:\autoexec.bat
2015-04-20 23:07 - 2015-04-20 23:07 - 00003328 _____ () C:\WINDOWS\System32\Tasks\SpyHunter4Startup
2015-04-20 23:07 - 2015-04-20 23:07 - 00001114 _____ () C:\Users\Joanna\Desktop\SpyHunter.lnk
2015-04-20 23:07 - 2015-04-20 23:07 - 00000000 ____ D () C:\Users\Joanna\AppData\Roaming\Enigma Software Group
2015-04-20 23:07 - 2015-04-20 23:07 - 00000000 ____ D () C:\sh4ldr
2015-04-20 23:06 - 2015-04-20 23:06 - 00022704 _____ () C:\WINDOWS\system32\Drivers\EsgScanner.sys
2015-04-20 23:06 - 2015-04-20 23:06 - 00000000 ____ D () C:\Program Files\Enigma Software Group
EmptyTemp:
Plik zapisz pod nazwą fixlist.txt i umieść obok FRST w tym samym folderze.
Wszystko działa, dziękuję.
Skasuj folder C:\FRST.