Windows Version Installer i masa innych rzeczy

Pani_Kredka · 27 Czerwiec 2014 20:22

Wszystko zaczęło się od tego, że włączyła mi się nagle instalacja programu, którego nigdy nie ściągałam - Windows Version Installer. Gdy klikam “anuluj”, to na pulpicie pojawia mi się ikonka Continue VuuPC Installation. Od razu ją wywalam, ale i tak po jakimś czasie włącza mi się znowu ta instalacja.

Włączyłam komputer dzisiaj po kilku dniach przerwy, a tam straszny syf. Zaraz po uruchomieniu włącza mi się kilka jakichś dziwnych instalacji, jakieś dziwne karty w przeglądarce, a Avast znajduje jakieś wirusy, ale oczywiście ich nie potrafi dobrze usunąć.

OTL.txt http://wklej.to/A7k9w

Z góry dzięki za pomoc.

Atis · 27 Czerwiec 2014 20:27

W panelu sterowania odinstaluj:

NetoCoupuonn

FaunDeals

TakeTheCooupon

UUTuBBerAdBLOcKeoR

surf annd keep

FindBeStDeeal

BlockAndSurf

BrowseMark

fst_pl_129

omiga-plus uninstaller

Plus-HD-9.1

RegClean-Pro

VO Package

WindowsProtectManger20.0.0.401

Pobierz i uruchom AdwCleaner Kliknij Szukaj i później Usuń.

Pobierz Farbar Recovery Scan Tool 32-Bit Version

Uruchom FRST i kliknij Scan. Pokaż raport FRST i Addition.

Pani_Kredka · 28 Czerwiec 2014 23:06

Od kilku godzin jest cały czas “Getting Office Sessions errors: 2767”, wiec wklejam to, co się zrobiło.

FRST http://wklej.org/id/1404472/

Addition http://wklej.org/id/1404474/

Atis · 28 Czerwiec 2014 23:43

Wklej do systemowego notatnika i zapisz jako plik tekstowy o nazwie fixlist :

(Revizer) C:\Program Files\BlockAndSurfS\BlockAndSurf.exe
HKLM\...\Run: [fst_pl_129] => [X]
HKLM\...\Run: [t4pc_en_7] => [X]
HKU\S-1-5-21-1259646801-4229971253-871571626-1005\...\Run: [ISUSPM Startup] => C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe [221184 2004-06-16] (InstallShield Software Corporation)
HKU\S-1-5-21-1259646801-4229971253-871571626-1005\...\Run: [AdobeBridge] => [X]
HKU\S-1-5-21-1259646801-4229971253-871571626-1005\...\Run: [BlockAndSurf] => C:\Program Files\BlockAndSurfS\BlockAndSurf.exe [131584 2014-06-17] (Revizer)
ShellIconOverlayIdentifiers: DropboxExt1 -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => No File
ShellIconOverlayIdentifiers: DropboxExt2 -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => No File
ShellIconOverlayIdentifiers: DropboxExt3 -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => No File
ShellIconOverlayIdentifiers: DropboxExt4 -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => No File
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
SearchScopes: HKLM - DefaultScope value is missing.
Winsock: Catalog5 01 mswsock.dll File Not found () ATTENTION: The LibraryPath should be "%SystemRoot%\system32\NLAapi.dll"
Winsock: Catalog5 05 mswsock.dll File Not found () ATTENTION: The LibraryPath should be "%SystemRoot%\System32\mswsock.dll"
FF Extension: OneClickDownloader - C:\Users\Mlle Em\AppData\Roaming\Mozilla\Firefox\profiles\extensions\OneClickDownload@OneClickDownload.com [2012-10-06]
FF Extension: IsaveR - C:\Users\Mlle Em\AppData\Roaming\Mozilla\Firefox\Profiles\8j8454jc.default\Extensions\opq04s.d@c-xoyuyaao.co.uk [2014-05-22]
FF Extension: No Name - C:\Users\Mlle Em\AppData\Roaming\Mozilla\Firefox\Profiles\8j8454jc.default\Extensions\staged [2014-06-27]
FF HKCU\...\Firefox\Extensions: [{E01D5CDB-4160-4A83-01C7-C98E79981573}] - C:\Program Files\BlockAndSurfS\174.xpi
FF Extension: BlockAndSurf - C:\Program Files\BlockAndSurfS\174.xpi [2014-06-17]
CHR Extension: (No Name) - C:\Users\Mlle Em\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaipilfmheplbcghignccoiiebekkdhe [2014-06-21]
CHR Extension: (UUTuBBerAdBLOcKeoR) - C:\Users\Mlle Em\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlcicabikahehcgcoalmbgkknnannpgm [2014-01-31]
CHR Extension: (No Name) - C:\Users\Mlle Em\AppData\Local\Google\Chrome\User Data\Default\Extensions\fpmdfjcjilgmajbldnlanniocaadgeff [2014-03-16]
CHR Extension: (No Name) - C:\Users\Mlle Em\AppData\Local\Google\Chrome\User Data\Default\Extensions\gfgkokkjhdonbkfpfnlfdkfelojkibol [2014-01-01]
CHR Extension: (No Name) - C:\Users\Mlle Em\AppData\Local\Google\Chrome\User Data\Default\Extensions\hlleejkhahkniflijnihfglbcbghlgma [2014-05-22]
CHR Extension: (No Name) - C:\Users\Mlle Em\AppData\Local\Google\Chrome\User Data\Default\Extensions\kjahginipekkicihnialipalgnhmaclg [2014-06-17]
CHR Extension: (IsaveR) - C:\Users\Mlle Em\AppData\Local\Google\Chrome\User Data\Default\Extensions\opcponefkpkfjjembdanidmgnecokdgi [2014-05-22]
CHR Extension: (FaunDeals) - C:\ProgramData\bpijmofenmhicfiilelcohljbdhkcohe\ [2014-05-22]
CHR HKLM\...\Chrome\Extension: [fpgkjhpjldibdbbppfcabadmpfenkdfe] - C:\Program Files\FileServe Manager\FSChromeAddOn.crx [2014-05-22]
CHR HKLM\...\Chrome\Extension: [kmiackaflccphmmcnbfffappoofaplfb] - C:\ProgramData\DownloadnSave\kmiackaflccphmmcnbfffappoofaplfb.crx [2014-05-22]
CHR HKLM\...\Chrome\Extension: [ofbjmeiaiacfcpcdbjnlighpjmmbdbpj] - C:\ProgramData\Download and Sa\ofbjmeiaiacfcpcdbjnlighpjmmbdbpj.crx [2011-08-16]
CHR HKLM\...\Chrome\Extension: [phgbjkeepgpbmapocakdeaiabpncmnfp] - C:\ProgramData\DownloadnSave\phgbjkeepgpbmapocakdeaiabpncmnfp.crx [2011-08-16]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
R1 {b99c8534-7800-48fa-bd71-519a46cdc7e1}t; C:\Windows\System32\drivers\{b99c8534-7800-48fa-bd71-519a46cdc7e1}t.sys [55232 2014-05-13] (StdLib)
C:\AdwCleaner
C:\Users\Mlle Em\Desktop\Wyczyść rejestr za darmo!.lnk
C:\Windows\System32\drivers\{b99c8534-7800-48fa-bd71-519a46cdc7e1}t.sys
C:\Users\Mlle Em\AppData\Roaming\omiga-plus
C:\Program Files\BlockAndSurfS
C:\ProgramData\DownloadnSave
C:\Program Files\FileServe Manager
C:\ProgramData\4fa1f46ac06a101f
C:\Users\Mlle Em\AppData\Local\Temp\*.exe
C:\Users\Mlle Em\AppData\Local\Temp\*.dll
Task: {5FE7F298-06EF-4B80-AC08-E959B45F2C91} - System32\Tasks\{C825463C-C234-4129-9676-7D7909AFBAC4} => c:\program files\opera\opera.exe [2013-01-26] (Opera Software)
Task: {64120141-CB05-402B-A868-5C6FEE645EC5} - System32\Tasks\{35DC3473-A719-4d14-B7C1-FD326CA84A0C} => C:\Users\MLLEEM~1\AppData\Local\Temp\Qxo.exe <==== ATTENTION
Task: {6A8C4DD0-DB09-4430-BDD0-28D3D3819554} - System32\Tasks\{BBAEAEAF-1275-40e2-BD6C-BC8F88BD114A} => C:\Users\MLLEEM~1\AppData\Local\Temp\Qxq.exe <==== ATTENTION
Task: {75D6681C-FC1E-467C-8746-D0C7F53DB3C8} - System32\Tasks\Updater21806.exe => C:\Users\Mlle
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcmscsvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcmscsvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MCODS => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MpfService => ""="Service"
CMD: netsh winsock reset
Reboot:

Uruchom FRST i kliknij Fix. Pokaż raport z usuwania Fixlog.

Kliknij Scan i pokaż nowy raport z FRST bez Addition.