Windows version installer

Dla specjalistów Bezpieczeństwo
#1

Witam, 

#2

Usługi/Instalator Windows - Ręczny (Zatrzymaj Usługę)

Odzyskiwanie : Nie podejmuj żadnej akcji x3

#3

Wklej do systemowego notatnika i zapisz jako plik tekstowy o nazwie fixlist :

CloseProcesses:
HKLM-x32\...\Run: [] => [X]
HKU\S-1-5-21-1284244206-3606719172-2638518071-1000\...\Run: [ASRockXTU] => [X]
HKU\S-1-5-21-1284244206-3606719172-2638518071-1000\...\Run: [AdobeBridge] => [X]
HKU\S-1-5-21-1284244206-3606719172-2638518071-1000\...\Run: [Akamai NetSession Interface] => "C:\Users\Cezar\AppData\Local\Akamai\netsession_win.exe"
HKU\S-1-5-21-1284244206-3606719172-2638518071-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [ASRockXTU] => [X]
HKU\S-1-5-21-1284244206-3606719172-2638518071-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [AdobeBridge] => [X]
HKU\S-1-5-21-1284244206-3606719172-2638518071-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [Akamai NetSession Interface] => "C:\Users\Cezar\AppData\Local\Akamai\netsession_win.exe"
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
HKU\S-1-5-21-1284244206-3606719172-2638518071-1000\Software\Microsoft\Internet Explorer\Main,Start Page = 
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
OPR Extension: (Radio Canyon) - C:\Users\Cezar\AppData\Roaming\Opera Software\Opera Stable\Extensions\bikofacodmhdpkfdeeocponfcgjcdfbk [2014-12-01]
R2 zyqejiky; C:\Users\Cezar\AppData\Roaming\03000200-1423959381-0500-0006-000700080009\nsz7B8.tmp [196608 2015-02-15] () [File not signed]
S2 AODDriver4.2.0; \??\C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [X]
S3 BRDriver64; \??\C:\ProgramData\BitRaider\BRDriver64.sys [X]
S3 BRDriver64_1_3_3_E02B25FC; \??\C:\ProgramData\BitRaider\support\1.3.3\E02B25FC\BRDriver64.sys [X]
S3 cleanhlp; \??\C:\Program Files (x86)\Emsisoft Anti-Malware\cleanhlp64.sys [X]
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]
C:\Users\Cezar\AppData\Roaming\03000200-1423959381-0500-0006-000700080009
2015-02-15 17:09 - 2015-02-15 17:09 - 00003771 _____ () C:\Users\Cezar\Downloads\[kickass.to]spyhunter.security.suite.3.5.11.crack.torrent
2015-02-15 15:44 - 2015-02-15 15:44 - 00017654 _____ () C:\Users\Cezar\Downloads\[kickass.to]spyhunter.4.18.9.4384.torrent
2015-02-15 18:01 - 2015-02-15 18:01 - 00013400 _____ () C:\Users\Cezar\Downloads\[kickass.to]malwarebytes.anti.malware.premium.2.0.4.1028.final.keys.atom.torrent
2015-02-15 00:48 - 2015-02-15 00:49 - 00000000 ___HD () C:\Users\Cezar\AppData\Roaming\GoldenGate
2015-02-15 00:16 - 2015-02-15 13:41 - 00000000 ____ D () C:\Users\Cezar\AppData\Roaming\03000200-1423959381-0500-0006-000700080009
2015-02-15 16:19 - 2014-09-03 11:48 - 00000000 ____ D () C:\AdwCleaner
Task: {20155DB7-A5C0-41C7-B5D1-3F91AAB37E10} - System32\Tasks\{FFE6EC69-DF75-4ED7-94DE-7E76B6AB85B6} => pcalua.exe -a C:\Users\Cezar\AppData\Roaming\mystartsearch\UninstallManager.exe -c -ptid=vtt
Task: {3B7A79A3-D888-4A92-8BCB-F69F0B29BEA7} - System32\Tasks\Origin => C:\ProgramData\Origin\update.vbe [2015-02-02] () <==== ATTENTION
C:\ProgramData\Origin\update.vbe
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CleanHlp => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CleanHlp.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\CleanHlp => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\CleanHlp.sys => ""="Driver"
EmptyTemp:

Uruchom FRST i kliknij Fix. Pokaż raport z usuwania Fixlog.

Kliknij Scan i pokaż nowy raport z FRST bez Addition.

#4

Niestety nie mam takiej usługi uruchomionej.

 

 

FRST: http://wklej.org/id/1636462/

Fixlog: http://wklej.org/id/1636465/

#5

Skasuj folder C:\FRST

Usuń stare punkty przywracania: Aby usunąć wszystkie punkty przywracania

Przeczytaj w jaki sposób należy instalować programy: KLIK - KLIK - KLIK - KLIK

Odinstaluj:

Adobe Flash Player 10 ActiveX

Adobe Flash Player 12 Plugin

Adobe Shockwave Player 12.1

Java 7 Update 55

Zainstaluj:

Flash Player 16.0.0.305 Plugin

Flash Player 16.0.0.305 ActiveX

Java 8 Update 31

#6

Zrobione!