Instalacja comodo to najgorsze co mozna zrobic, pozniej nie mozna tego badziewia normalnie odinstalowac, a producent nie wpadl na pomysl udostepnienia oficjalnego narzedzia do usuwania pozostalosci.
Wykonaj Fixlist.txt dla FRST:
CloseProcesses:
Task: {2286F6E4-A0B6-4641-9B4E-2F5905AD8739} - System32\Tasks\COMODO\COMODO Signature Update {B9D5C6F9-17D2-4917-8BD0-614BAA1C6A59} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe
Task: {4A541EC1-FDFF-4266-A183-84DFBDD9D9F0} - System32\Tasks\COMODO\COMODO Update {A6D52E4F-569B-4756-B3D8-DF217313DA85} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe
Task: {56E7832E-4483-46CD-AF68-60FF60387637} - System32\Tasks\{31DDBD37-5DB7-4030-8064-10B0CAA806C3} => C:\Program Files\COMODO\COMODO Internet Security\cistray.exe
Task: {5F6B29AA-BE8F-4753-B1DB-D16B6658AF58} - System32\Tasks\COMODO\COMODO Autostart {D5EFF3B3-E126-4AF6-BCE9-852A72129E10} => C:\Program Files\COMODO\COMODO Internet Security\cistray.exe
Task: {6320BF97-17E1-4D57-808F-1F29EB332C18} - System32\Tasks\COMODO\COMODO Scan {F140D794-60B6-4F00-9235-D6457AA25B22} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe
Task: {7E41C00B-24C6-446B-B761-F06B0FB9D9B5} - System32\Tasks\COMODO\COMODO CMC {06A09C0F-DD9C-4191-A670-71115CD78627} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe
Task: {9B878657-5CF5-4E48-8499-976D3D8C20E5} - \CCleanerSkipUAC -> No File <==== ATTENTION
Task: {CE889F7F-D10E-4920-84A4-127B220B4230} - System32\Tasks\COMODO\COMODO Cache Builder {0FB77674-7905-4F34-A362-C5A9A26F8CF9} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe
Task: {F4B7C8EB-5213-4E4C-9295-B0BB66A6EAA2} - System32\Tasks\COMODO\COMODO Maintenance {947247B5-026A-4437-9371-770782BE839D} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> No File
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> No File
HKU\S-1-5-21-3726984452-187000165-1872624170-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://us.yahoo.com/?fr=fp-comodo&type=33090001005_8.4.0.5076_u_hp_sp
SearchScopes: HKU\S-1-5-21-3726984452-187000165-1872624170-1001 -> DefaultScope {0AA24E16-07B3-4694-8357-3C21ACC5F516} URL = hxxps://us.search.yahoo.com/yhs/search?hspart=comodo&hsimp=yhs-com_chrome&type=33090001005_8.4.0.5076_u_ds_sp&p={searchTerms}
SearchScopes: HKU\S-1-5-21-3726984452-187000165-1872624170-1001 -> {0AA24E16-07B3-4694-8357-3C21ACC5F516} URL = hxxps://us.search.yahoo.com/yhs/search?hspart=comodo&hsimp=yhs-com_chrome&type=33090001005_8.4.0.5076_u_ds_sp&p={searchTerms}
CHR NewTab: Default -> Not-active:"chrome-extension://kiheedebahjjjloccphfnebfabnmehlj/stubby.html", Not-active:"chrome-extension://mallpejgeafdahhflmliiahjdpgbegpk/stubby.html"
CHR DefaultSearchURL: Default -> hxxps://search.yahoo.com/search?fr=mcafee&type=C210US91075D20160901&p={searchTerms}
CHR DefaultSearchKeyword: Default -> mcafee
CHR Extension: (No Name) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho [2017-04-02]
R1 cmderd; C:\WINDOWS\System32\DRIVERS\cmderd.sys [40960 2017-03-30] (COMODO)
R1 cmdGuard; C:\WINDOWS\System32\DRIVERS\cmdguard.sys [831504 2017-03-30] (COMODO)
R1 cmdhlp; C:\WINDOWS\system32\DRIVERS\cmdhlp.sys [50808 2017-03-30] (COMODO)
R1 inspect; C:\WINDOWS\system32\DRIVERS\inspect.sys [138568 2016-04-27] (COMODO)
2017-05-30 11:03 - 2017-05-30 11:03 - 00000000 ____D C:\WINDOWS\System32\Tasks\COMODO
2017-05-30 11:03 - 2017-05-22 22:39 - 00000000 _____ C:\WINDOWS\System32\Tasks\CIS_{15198508-521A-4D69-8E5B-B94A6CCFF805}
2017-05-22 22:58 - 2017-05-06 11:17 - 04797632 _____ (COMODO) C:\ProgramData\cis9B57.exe
2017-05-22 22:39 - 2017-05-06 11:17 - 04797632 _____ C:\ProgramData\cisD47.exe
2017-05-22 22:39 - 2017-04-22 13:28 - 00365248 _____ C:\ProgramData\cmdres.dll
2017-05-06 11:17 - 2017-04-22 13:28 - 00230592 _____ (COMODO) C:\WINDOWS\system32\cmdshim64.dll
2017-05-06 11:17 - 2017-04-22 13:26 - 00194752 _____ (COMODO) C:\WINDOWS\SysWOW64\cmdshim32.dll
2017-05-29 13:16 - 2016-09-01 08:28 - 00000000 ____D C:\ProgramData\McAfee
CMD: netsh winsock reset
Wlacz wszystko co wylaczyles w msconfig i zamiesc nowe logi z FRST.
Sprawdz tez w ustawieniach polaczenia czy nie masz tam sterownikow instalowanych przez ktorys z antywirusow. Jezeli sa to je usun.
