Elektroda.pl
Elektroda.pl
X
Proszę, dodaj wyjątek www.elektroda.pl do Adblock.
Dzięki temu, że oglądasz reklamy, wspierasz portal i użytkowników.

Win 10 64 bit - Jak usunąć program MPC Cleaner?

gregorius0 06 Paź 2016 21:43 648 2
  • Pomocny post
    #2 06 Paź 2016 22:01
    Kolobos
    Spec od komputerów

    Przejdz do katalogu C:\Program Files (x86)\MPC Cleaner\ i uruchom plik uninstall z prawami administratora.

    Uzyj AdwCleaner, opcja Scan i Clean/Szukaj i Usun: http://www.bleepingcomputer.com/download/adwcleaner/

    Obok frst.exe utworz plik Fixlist.txt z zawartoscia:
    Task: {42ACA376-4D16-48D2-9437-1386E918E645} - System32\Tasks\InternetSC => Firefox.exe hxxp://novostiavto.net/?cbr
    Task: {AEBB7471-FD2B-44A6-900C-97D118B237EA} - System32\Tasks\Driver Easy Scheduled Scan => C:\Program Files\Easeware\DriverEasy\DriverEasy.exe [2016-06-11] (Easeware)
    Task: {DAC9E884-9BAA-4299-9BDD-872B6675E8EE} - System32\Tasks\{A9571A3C-8D99-4426-96A6-EF9ECC4418D4} => pcalua.exe -a "C:\Program Files (x86)\MPC Cleaner\Uninstall.exe" -c /xuninstall
    Task: C:\WINDOWS\Tasks\Driver Easy Scheduled Scan.job => C:\Program Files\Easeware\DriverEasy\DriverEasy.exe
    ShortcutWithArgument: C:\Users\Grzegorz\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Mail.Ru.lnk -> C:\Windows\System32\rundll32.exe (Microsoft Corporation) -> url,FileProtocolHandler "hxxp://www.mail.ru/cnt/20775012?gp=811035"
    (DotC United Inc) C:\Program Files (x86)\MPC Cleaner\MPCProtectService.exe
    (DotC United Inc) C:\Program Files (x86)\MPC Cleaner\MPCTray.exe
    (DotC United Inc) C:\Program Files (x86)\MPC Cleaner\AdCleaner.exe
    (DotC United Inc) C:\Program Files (x86)\MPC Cleaner\MPCTray64.exe
    (DotC United Inc) C:\Program Files (x86)\MPC Cleaner\AdxEngine.exe
    IFEO\SppExtComObj.exe: [Debugger] SppExtComObjPatcher.exe
    GroupPolicy: Ograniczenia - Windows Defender <======= UWAGA
    GroupPolicy\User: Ograniczenia <======= UWAGA
    ProxyServer: [S-1-5-21-1073421467-778091904-2857665001-1002] => 127.0.0.1:18159
    SearchScopes: HKU\S-1-5-21-1073421467-778091904-2857665001-1002 -> {FFEBBF0A-C22C-4172-89FF-45215A135AC7} URL = hxxp://go.mail.ru/distib/ep/?q={SearchTerms}&product_id=%7B78491D7E-7EF1-424B-A5C8-65422BB0FFF6%7D&gp=811041
    BHO-x32: Ďîčńę@Mail.Ru -> {8E8F97CD-60B5-456F-A201-73065652D099} -> C:\Users\Grzegorz\AppData\Local\Mail.Ru\Sputnik\IESearchPlugin.dll [2016-10-05] (Mail.Ru)
    FF Homepage: Mozilla\Firefox\Profiles\u33300n8.default -> hxxps://mail.ru/cnt/11956636?fr=ffhp1.0.3&gp=800000
    FF Extension: (Домашняя страница Mail.Ru) - C:\Users\Grzegorz\AppData\Roaming\Mozilla\Firefox\Profiles\u33300n8.default\Extensions\homepage@mail.ru [2016-10-06]
    FF Extension: (Поиск@Mail.Ru) - C:\Users\Grzegorz\AppData\Roaming\Mozilla\Firefox\Profiles\u33300n8.default\Extensions\search@mail.ru [2016-10-06]




    FF Extension: (Визуальные закладки @Mail.Ru) - C:\Users\Grzegorz\AppData\Roaming\Mozilla\Firefox\Profiles\u33300n8.default\Extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7} [2016-10-06]
    FF SearchPlugin: C:\Users\Grzegorz\AppData\Roaming\Mozilla\Firefox\Profiles\u33300n8.default\searchplugins\mailru.xml [2016-10-06]
    CHR NewTab: Default -> "chrome-extension://oelpkepjlgmehajehfeicfbjdiobdkfj/visual-bookmarks.html"
    CHR Extension: (Домашняя страница Mail.Ru) - C:\Users\Grzegorz\AppData\Local\Google\Chrome\User Data\Default\Extensions\ccfifbojenkenpkmnbnndeadpfdiffof [2016-10-05]0-04]
    CHR Extension: (Визуальные Закладки Mail.Ru) - C:\Users\Grzegorz\AppData\Local\Google\Chrome\User Data\Default\Extensions\oelpkepjlgmehajehfeicfbjdiobdkfj [2016-10-05]
    CHR Extension: (Mail.Ru) - C:\Users\Grzegorz\AppData\Local\Google\Chrome\User Data\Default\Extensions\ojlcebdkbpjdpiligkdbbkdkfjmchbfd [2016-10-05]
    CHR HKLM-x32\...\Chrome\Extension: [ccfifbojenkenpkmnbnndeadpfdiffof] - hxxps://clients2.google.com/service/update2/crx
    CHR HKLM-x32\...\Chrome\Extension: [oelpkepjlgmehajehfeicfbjdiobdkfj] - hxxps://clients2.google.com/service/update2/crx
    CHR HKLM-x32\...\Chrome\Extension: [ojlcebdkbpjdpiligkdbbkdkfjmchbfd] - hxxps://clients2.google.com/service/update2/crx
    R2 MPCProtectService; C:\Program Files (x86)\MPC Cleaner\MPCProtectService.exe [355808 2016-09-04] (DotC United Inc) <==== UWAGA
    R2 ibtsiva; %SystemRoot%\system32\ibtsiva [X]
    R1 MPCKpt; C:\Windows\System32\DRIVERS\MPCKpt.sys [60136 2016-09-04] (DotC United Inc) <==== UWAGA
    2016-10-06 14:32 - 2016-10-06 14:32 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MPC
    2016-10-05 16:27 - 2016-10-05 16:31 - 00000000 ____D C:\Users\Grzegorz\AppData\LocalLow\Unity
    2016-10-05 16:27 - 2016-10-05 16:31 - 00000000 ____D C:\Users\Grzegorz\AppData\Local\Unity
    2016-10-05 16:27 - 2016-10-05 16:31 - 00000000 ____D C:\Users\Grzegorz\AppData\Local\Amigo
    2016-10-05 16:20 - 2016-10-05 16:27 - 00000000 ____D C:\Users\Grzegorz\AppData\Roaming\MailProducts
    2016-10-05 16:19 - 2016-10-05 16:31 - 00000000 ____D C:\Users\Grzegorz\AppData\Local\Mail.Ru
    2016-10-05 16:19 - 2016-10-05 16:19 - 00003682 _____ C:\WINDOWS\System32\Tasks\InternetSC
    2016-10-05 16:19 - 2016-10-05 16:19 - 00000194 _____ C:\Users\Grzegorz\Desktop\Искать в Интернете.url
    2016-10-05 16:19 - 2016-10-05 16:19 - 00000000 ____D C:\ProgramData\Mail.Ru
    2016-10-04 19:52 - 2016-10-04 19:52 - 01195984 _____ (Kodagaceno ) C:\Users\Grzegorz\Downloads\profile_visitors_for_facebook.exe
    2016-09-25 08:43 - 2016-10-06 14:31 - 00000180 _____ C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
    2016-09-25 08:43 - 2016-09-25 08:43 - 00000568 _____ C:\WINDOWS\system32\{F33C3B9B-72AF-418A-B3FD-560646F7CDA2}.bat
    2016-09-25 08:43 - 2016-09-25 08:43 - 00000200 _____ C:\WINDOWS\system32\{EC94D02F-D200-4428-9531-05AF7F9799CB}.bat
    2016-10-06 14:32 - 2016-09-05 15:51 - 00001853 _____ C:\Users\Public\Desktop\MPC Desktop.lnk
    2016-10-06 14:32 - 2016-09-05 15:51 - 00001846 _____ C:\Users\Public\Desktop\MPC AdCleaner.lnk
    2016-10-06 14:32 - 2016-09-05 15:51 - 00001798 _____ C:\Users\Public\Desktop\MPC Cleaner.lnk
    2016-10-05 14:40 - 2016-09-04 12:02 - 00000000 ____D C:\Program Files (x86)\MPC Cleaner
    EmptyTemp:

    W FRST wybierz Napraw.

    Usun katalog C:\FRST.

    Zrob pelny skan przy pomocy Mbam i usun to co wykryje:
    http://www.bleepingcomputer.com/download/malwarebytes-anti-malware/

    Po wykonaniu zamiesc nowe logi z FRST, ze skanowania.

    0
  • #3 07 Paź 2016 18:51
    gregorius0
    Poziom 3  

    Ok. Zrobiłem po kolei jak napisane wyżej i pozbyłem się tego dopiero po użyciu programu Malwarebytes.
    Dziękuję.
    Win 10 64 bit - Jak usunąć program MPC Cleaner?

    0