Win32 Bladabindi.gen

Dla specjalistów Bezpieczeństwo
#1

Czołem ! Mam problem z bladabindi, Microsoft Security Essential nie wyrabia. Codziennie ta sama historia MSE wykrywa usuwa a po ponownym uruchomieniu znów wykrywa…

#2

Nowy log obowiązkowy - Farbar Recovery Scan Tool

#3

Nowe logi :

#4

W panelu sterowania odinstaluj PC Data App.

Wklej do systemowego notatnika i zapisz jako plik tekstowy o nazwie fixlist :

CloseProcesses:
HKLM-x32\...\Run: [TasksWatch] => C:\Users\EMIL~1.EMI\AppData\Local\Temp\TasksWatch.exe [1251968 2014-03-17] ()
HKLM-x32\...\Run: [03a539769d806614ad74aaf7043d57a7] => C:\Users\Emil.EMIL\AppData\Local\Temp\Windows process .exe [1048576000 2015-01-18] ()
HKU\S-1-5-21-543631025-878989197-1201569477-1002\...\Run: [03a539769d806614ad74aaf7043d57a7] => C:\Users\Emil.EMIL\AppData\Local\Temp\Windows process .exe [1048576000 2015-01-18] () <===== ATTENTION
AppInit_DLLs: C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC64Loader.dll => C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC64Loader.dll File Not Found
AppInit_DLLs-x32: C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC32Loader.dll => "C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC32Loader.dll" File Not Found
Startup: C:\Users\Emil.EMIL\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\03a539769d806614ad74aaf7043d57a7.exe ()
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = 
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = 
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = 
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page = 
URLSearchHook: [S-1-5-21-543631025-878989197-1201569477-1002] ATTENTION ==> Default URLSearchHook is missing.
S2 ProtectMonitor; C:\Program Files (x86)\PCData\StartHelp.exe [90680 2014-03-14] () [File not signed] <==== ATTENTION
S3 EverestDriver; \??\G:\Diagnostyka\EVEREST PORTABLE 5.0\kerneld.amd64 [X]
C:\Users\Emil.EMIL\AppData\Roaming\D394D188-BAC7-4e03-8FAF-389A4D7EC6F4
C:\Program Files (x86)\PCData
Task: {15ED0CB3-5901-403D-B4E7-9ED7F183AE86} - \SomotoUpdateCheckerAutoStart No Task File <==== ATTENTION
Task: {19B4DBE3-5A34-4F1F-96BE-010241013448} - System32\Tasks\{83EBC9ED-7ED8-43C1-BFC1-7B53E09DA189} => pcalua.exe -a C:\PROGRA~2\COMMON~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe -c /M{6BE2A4A4-99FB-48ED-AE1E-4E850389F804}
C:\Users\Emil.EMIL\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.exe
EmptyTemp:

Uruchom FRST i kliknij Fix. Pokaż raport z usuwania Fixlog.

Kliknij Scan i pokaż nowy raport z FRST bez Addition.

#5

fixlog

#6

Wklej do systemowego notatnika i zapisz jako plik tekstowy o nazwie fixlist :

HKU\S-1-5-21-543631025-878989197-1201569477-1002\...\Run: [ALLUpdate] => "C:\Programy\Video\ALLPlayer\ALLUpdate.exe" "sleep"
SearchScopes: HKLM-x32 -> DefaultScope value is missing.
URLSearchHook: [S-1-5-21-543631025-878989197-1201569477-1002] ATTENTION ==> Default URLSearchHook is missing.
C:\ProgramData\boost_interprocess
DeleteQuarantine:

Uruchom FRST i kliknij Fix. Skasuj folder C:\FRST

Przeczytaj w jaki sposób należy instalować programy: KLIK - KLIK - KLIK - KLIK

Odinstaluj Adobe Flash Player 10 ActiveX i Java 7 Update 51.

Zainstaluj Flash Player 16.0.0.257 ActiveX

#7

fixlog

#8

Nie potrzeba nowych logów.