Cerber 3 usuwanie pozostałości

[tachion]

Poprzedni skrypt nie był skopiowany tak jak trzeba i wykonany.

Zaloguj się na konto (nie przełączaj) W7HP

Do notatnika wklej i zapisz jako fixlist.txt

Kod:

CloseProcesses:
CreateRestorePoint:
S3 huawei_enumerator; system32\DRIVERS\ew_jubusenum.sys [X]
S3 hwdatacard; system32\DRIVERS\ewusbmdm.sys [X]
S3 mdareDriver_48; \??\C:\Program Files (x86)\Fortinet\FortiClient\mdare64_48.sys [X]
S3 mdareDriver_52; \??\C:\Program Files (x86)\Fortinet\FortiClient\mdare64_52.sys [X]
S3 mdareDriver_61; \??\C:\Users\W7HP\AppData\Local\Temp\FCPreScan\mdare64_61.sys [X]
S3 mdareDriver_62; \??\C:\Users\W7HP\AppData\Local\Temp\FCPreScan\mdare64_62.sys [X]
S3 mdareDriver_63; \??\C:\Users\W7HP\AppData\Local\Temp\FCPreScan\mdare64_63.sys [X]
S3 mdareDriver_64; \??\C:\Windows\system32\Drivers\mdare64_64.sys [X]
C:\autoexec.bat
C:\Users\W7HP\AppData\Local\YmjPack
C:\Users\W7HP\AppData\Local\Ujmedia
C:\Users\W7HP\AppData\Roaming\winmgr.txt
C:\Users\Zdalny\Desktop\@[email protected]
C:\Users\W7HP\Downloads\@[email protected]
C:\Users\W7HP\Documents\@[email protected]
C:\Users\W7HP\Desktop\@[email protected]
C:\Users\W7HP\@[email protected]
C:\Users\Zdalny\Desktop\@[email protected]
C:\Users\W7HP\Downloads\@[email protected]
C:\Users\W7HP\Documents\@[email protected]
C:\Users\W7HP\Desktop\@[email protected]
C:\Users\W7HP\@[email protected]
C:\Users\Zdalny\Desktop\@[email protected]
C:\Users\W7HP\Downloads\@[email protected]
C:\Users\W7HP\Documents\@[email protected]
C:\Users\W7HP\Desktop\@[email protected]
C:\Users\W7HP\@[email protected]
DeleteKey: HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Adobe ARM
DeleteKey: HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\AdobeAAMUpdater-1.0
DeleteKey: HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\SunJavaUpdateSched
Task: {62633F80-2961-48C8-8B96-BDA5AAC25731} - \ReimageUpdater -> Brak pliku <==== UWAGA
Task: {B8F75705-A41C-4162-8D16-C500B29C2578} - System32\Tasks\COMODO\COMODO Update {A6D52E4F-569B-4756-B3D8-DF217313DA85} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe
Task: {ED9B8023-30DB-4919-81AA-49247FB0A0EF} - System32\Tasks\{10EF5062-FADE-4238-95E4-4EA61663B88F}-Kodak Share Button App Camera detect => C:\Program Files (x86)\Kodak\KODAK Share Button App\Listener.exe [2012-10-11] (Eastman Kodak Company)
Task: {EFFE451C-E64E-4A5E-BA4A-3A7AD6659780} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2016-09-08] (Adobe Systems Incorporated)
CMD: netsh advfirewall reset
EmptyTemp:

Zapisany skrypt umieść obok ściągniętego programu FRST
Następnie w programie kliknij Napraw. Po wykonaniu pokaż raport z tego działania.