Elektroda.pl
Elektroda.pl
X
Proszę, dodaj wyjątek www.elektroda.pl do Adblock.
Dzięki temu, że oglądasz reklamy, wspierasz portal i użytkowników.

Safe finder - Jak usunąć Safe Finder?

qwack1 25 Lut 2016 22:09 1560 3
  • Pomocny post
    #3 25 Lut 2016 22:27
    Kolobos
    Spec od komputerów

    Odinstaluj:
    Adobe Reader 9.2 - Polish, zmien na najnowsza wersje AR lub na Foxit: http://ninite.com/foxit/
    Java 7 Update 9
    Java(TM) 6 Update 15
    RewardsArcade

    Zainstaluj http://ninite.com/foxit/ oraz https://support.microsoft.com/en-us/kb/2545227

    Obok frst.exe utworz plik fixlist.txt z zawartoscia:
    CustomCLSID: HKU\S-1-5-21-1917211548-2316332258-3165992119-1004_Classes\CLSID\{039B2CA5-3B41-4D93-AD77-47D3293FC5CB}\InprocServer32 -> C:\Program Files\Skype\Plugin Manager\ezPMUtils.dll => Brak pliku
    CustomCLSID: HKU\S-1-5-21-1917211548-2316332258-3165992119-1004_Classes\CLSID\{42481700-CF3C-4D05-8EC6-F9A1C57E8DC0}\InprocServer32 -> C:\Program Files\Skype\Plugin Manager\ezPMUtils.dll => Brak pliku
    CustomCLSID: HKU\S-1-5-21-1917211548-2316332258-3165992119-1004_Classes\CLSID\{BB6410D8-F879-4184-9C5C-6A02D16AE0B3}\InprocServer32 -> C:\Program Files\Skype\Plugin Manager\ezPMUtils.dll => Brak pliku
    CustomCLSID: HKU\S-1-5-21-1917211548-2316332258-3165992119-1004_Classes\CLSID\{CA1073A2-5F3F-4445-8E5E-7109BDCEDDBE}\InprocServer32 -> C:\Program Files\Skype\Plugin Manager\ezPMUtils.dll => Brak pliku
    CustomCLSID: HKU\S-1-5-21-1917211548-2316332258-3165992119-1004_Classes\CLSID\{D0D38C6E-BF64-4C42-840D-3E0019D9F7A6}\InprocServer32 -> C:\Program Files\Skype\Plugin Manager\ezPMUtils.dll => Brak pliku
    CustomCLSID: HKU\S-1-5-21-1917211548-2316332258-3165992119-1004_Classes\CLSID\{D5A55D2D-C59D-42C3-A5BF-4C08EEE74339}\InprocServer32 -> C:\Program Files\Skype\Plugin Manager\ezPMUtils.dll => Brak pliku
    Task: {3AE80625-1AD8-40BC-ADA9-3B2612E8D82D} - System32\Tasks\{983248B4-1CD8-46EE-8971-4CFDAA1E1257} => pcalua.exe -a "C:\Gry\Cortex_Command_2.3\Cortex_Command_2.3\Cortex Command.exe" -d C:\Gry\Cortex_Command_2.3\Cortex_Command_2.3
    Task: {B94975DA-99D1-46DA-8177-E09302056F44} - System32\Tasks\{BDE948EC-3AD7-46AA-9347-3A58663A0138} => C:\Program Files\Skype\Phone\Skype.exe [2014-12-11] (Skype Technologies S.A.)
    Task: {D1992203-2AE8-4704-8F03-8C16225F74D9} - System32\Tasks\{59150ED6-FBE3-40D9-AA4E-551AC0F20785} => pcalua.exe -a E:\SETUP.EXE -d E:\
    AppInit_DLLs: C:\ProgramData\Viatax\QuadSillax.dll => C:\ProgramData\Viatax\QuadSillax.dll [257536 2016-02-25] ()
    SearchScopes: HKLM -> ielnksrch URL = hxxp://%66%65%65%64.%73%6F%6E%69%63-%73%65%61...yD_3f2X58i0REi8wVTcV-w4wkjmVGoAzdM95y8&q={searchTerms}




    SearchScopes: HKLM -> {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2504091
    SearchScopes: HKLM -> {CF739809-1C6C-47C0-85B9-569DBB141420} URL = hxxp://toolbar.ask.com/toolbarv/askRedirect?o=10615&gct=&gc=1&q={searchTerms}&crm=1
    SearchScopes: HKU\S-1-5-21-1917211548-2316332258-3165992119-1004 -> DefaultScope {ielnksrch} URL =
    SearchScopes: HKU\S-1-5-21-1917211548-2316332258-3165992119-1004 -> ielnksrch URL = hxxp://%66%65%65%64.%73%6F%6E%69%63-%73%65%61...yD_3f2X58i0REi8wVTcV-w4wkjmVGoAzdM95y8&q={searchTerms}
    SearchScopes: HKU\S-1-5-21-1917211548-2316332258-3165992119-1004 -> {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2504091
    SearchScopes: HKU\S-1-5-21-1917211548-2316332258-3165992119-1004 -> {CF739809-1C6C-47C0-85B9-569DBB141420} URL = hxxp://toolbar.ask.com/toolbarv/askRedirect?o=10615&gct=&gc=1&q={searchTerms}&crm=1
    BHO: RewardsArcade -> {11111111-1111-1111-1111-110011041198} -> C:\Program Files\RewardsArcade\RewardsArcade.dll [2012-03-28] (215 Apps)
    Toolbar: HKLM - Brak nazwy - {0BF43445-2F28-4351-9252-17FE6E806AA0} - Brak pliku
    DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab
    DPF: {CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab
    DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab
    FF NewTab: C:\\ProgramData\\Viataxs\\ff.NT
    FF DefaultSearchEngine: findit
    FF DefaultSearchUrl: hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2504091&SearchSource=3&q={searchTerms}
    FF SearchEngineOrder.1: Ask.com
    FF Keyword.URL: hxxp://toolbar.ask.com/toolbarv/askRedirect?o=10615&gct=&gc=1&q=
    FF SearchPlugin: C:\Users\Anna\AppData\Roaming\Mozilla\Firefox\Profiles\2b0ewq0j.default\searchplugins\ask.xml [2009-09-12]
    FF SearchPlugin: C:\Users\Anna\AppData\Roaming\Mozilla\Firefox\Profiles\2b0ewq0j.default\searchplugins\askcom.xml [2012-11-25]
    FF SearchPlugin: C:\Users\Anna\AppData\Roaming\Mozilla\Firefox\Profiles\2b0ewq0j.default\searchplugins\conduit.xml [2011-11-20]
    FF SearchPlugin: C:\Users\Anna\AppData\Roaming\Mozilla\Firefox\Profiles\2b0ewq0j.default\searchplugins\findit.xml [2016-02-25]
    CHR HomePage: Default -> hxxp://%66%65%65%64.%73%6E%61%70%64%6F.%63%6F...QtgqalVVlJ2Me-JE0TIt8GVEvnz3xNiVqqWAhysTUjAyq
    CHR HKLM\...\Chrome\Extension: [dcmagccbogebndpoodhhhafmofelpffh] - C:\Users\Anna\AppData\Local\RewardsArcade\Chrome\RewardsArcade.crx [2012-03-28]
    S2 0235961250679904mcinstcleanup; C:\Users\Anna\AppData\Local\Temp\023596~1.EXE C:\PROGRA~1\COMMON~1\McAfee\INSTAL~1\cleanup.ini -cleanup -nolog -service
    U3 awfr9kel; C:\windows\system32\Drivers\awfr9kel.sys [0 ] (Microsoft Corporation) <==== UWAGA (zerobajtowy plik/folder)
    S3 nmwcdnsu; system32\drivers\nmwcdnsu.sys [X]
    S3 nmwcdnsuc; system32\drivers\nmwcdnsuc.sys [X]
    S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [X]
    S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [X]
    S3 STHDA; system32\DRIVERS\stwrt.sys [X]
    S3 vcxxuphj; Brak ImagePath
    2016-02-25 13:22 - 2016-02-25 13:22 - 00001012 _____ C:\Users\Anna\Desktop\Continue Windows 7 Service Pack 1 installation.lnk
    2016-02-25 13:21 - 2016-02-25 13:21 - 00002389 _____ C:\windows\system32\findit.xml
    2016-02-25 13:21 - 2016-02-25 13:21 - 00000000 ____D C:\ProgramData\Viataxs
    2016-02-25 13:19 - 2016-02-25 20:01 - 00000000 ____D C:\Program Files\Common Files\Zentone
    2016-02-25 13:19 - 2016-02-25 19:43 - 00000000 ____D C:\ProgramData\Viatax
    2016-02-25 13:19 - 2016-02-25 13:19 - 08003072 _____ C:\Users\Anna\AppData\Roaming\agent.dat
    2016-02-25 13:19 - 2016-02-25 13:19 - 01894738 _____ C:\Users\Anna\AppData\Roaming\S--Dox.tst
    2016-02-25 13:19 - 2016-02-25 13:19 - 00127488 _____ C:\Users\Anna\AppData\Roaming\Installer.dat
    2016-02-25 13:19 - 2016-02-25 13:19 - 00126464 _____ C:\Users\Anna\AppData\Roaming\noah.dat
    2016-02-25 13:19 - 2016-02-25 13:19 - 00064752 _____ C:\Users\Anna\AppData\Roaming\Config.xml
    2016-02-25 13:19 - 2016-02-25 13:19 - 00018432 _____ C:\Users\Anna\AppData\Roaming\Main.dat
    2016-02-25 13:19 - 2016-02-25 13:19 - 00011424 _____ C:\Users\Anna\AppData\Roaming\InstallationConfiguration.xml
    2016-02-25 13:19 - 2016-02-25 13:19 - 00005568 _____ C:\Users\Anna\AppData\Roaming\md.xml
    2016-02-25 13:19 - 2016-02-25 13:18 - 00762880 _____ C:\Users\Anna\AppData\Roaming\S--Dox.exe
    EmptyTemp:

    W FRST wybierz Napraw.

    Przy okazji sprobuj pobrac certyfikaty:
    https://technet.microsoft.com/en-us/library/cc734126(v=ws.10).aspx

    0
  • #4 27 Lut 2016 21:04
    qwack1
    Poziom 4  

    Zadziałało. Dzięki.

    0