Ten amiti siedzi w systemie.
Uruchom ponownie WISE Program Uninstaller Portable
prawym myszy[b] i opcja [b]Uruchom jako administratorW pole wyszukiwania wpisz: NETGATE, alboe anti
I odinstaluj według instrukcji jaka podałem
Jeśli się nie da to będziemy próbować na żywca FRST, ale miej świadomość, że takie wywalanie na żywca może spowodować, że system się nie podniesie.
Zaniim wykonaż poniższe utwórz punkt przywracaniaDo roboty:
1.Odinstaluj:
2.- Do notatnika wklej poniższe:
CloseProcesses:
(NETGATE Technologies s.r.o.) C:\Program Files\NETGATE\Amiti Antivirus\AmitiAntivirusHealth.exe
(NETGATE Technologies s.r.o.) C:\Program Files\NETGATE\Amiti Antivirus\AmitiAntivirusSrv.exe
R2 AmitiAvHealth; C:\Program Files\NETGATE\Amiti Antivirus\AmitiAntivirusHealth.exe [460096 2015-03-20] (NETGATE Technologies s.r.o.)
R2 AmitiAvSrv; C:\Program Files\NETGATE\Amiti Antivirus\AmitiAntivirusSrv.exe [2631520 2015-03-20] (NETGATE Technologies s.r.o.)
R1 AmitiAv; C:\Windows\System32\Drivers\amitiav.sys [14656 2015-03-12] (NETGATE Technologies s.r.o.)
S3 AmitiAvAccess; C:\Windows\System32\Drivers\amitiav_access.sys [20544 2015-03-12] (NETGATE Technologies s.r.o.)
R3 AmitiAvGuard; C:\Windows\System32\Drivers\amitiav_guard.sys [18880 2015-03-12] (NETGATE Technologies s.r.o.)
C:\Users\Bar Sklep\AppData\Roaming\Amiti Antivirus
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Amiti Antivirus
C:\Windows\system32\Drivers\amitiav_access.sys.bak
C:\Windows\system32\Drivers\amitiav_access.sys
C:\Windows\system32\Drivers\amitiav_guard.sys.bak
C:\Windows\system32\Drivers\amitiav_guard.sys
C:\Windows\system32\Drivers\amitiav.sys.bak
C:\Windows\system32\Drivers\amitiav.sys
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
S2 globalUpdate; C:\Program Files\globalUpdate\Update\globalupdate.exe [68608 2015-05-25] (globalUpdate) [File not signed] <==== ATTENTION
S3 globalUpdatem; C:\Program Files\globalUpdate\Update\globalupdate.exe [68608 2015-05-25] (globalUpdate) [File not signed] <==== ATTENTION
Task: {128CC778-25A0-4212-A832-85F28CB620F0} - System32\Tasks\CIS_{15198508-521A-4D69-8E5B-B94A6CCFF805} => C:\ProgramData\cis6F90.exe <==== ATTENTION
Task: C:\Windows\Tasks\a3d3ef0c-0c9a-4d1f-b748-fcdc5f85c0b4-1-6.job => C:\Program Files\CinemaPlus-3.2cV25.05\a3d3ef0c-0c9a-4d1f-b748-fcdc5f85c0b4-1-6.exe <==== ATTENTION
Task: C:\Windows\Tasks\a3d3ef0c-0c9a-4d1f-b748-fcdc5f85c0b4-1-7.job => C:\Program Files\CinemaPlus-3.2cV25.05\a3d3ef0c-0c9a-4d1f-b748-fcdc5f85c0b4-1-7.exe <==== ATTENTION
Task: C:\Windows\Tasks\a3d3ef0c-0c9a-4d1f-b748-fcdc5f85c0b4-10_user.job => C:\Program Files\CinemaPlus-3.2cV25.05\a3d3ef0c-0c9a-4d1f-b748-fcdc5f85c0b4-10.exe <==== ATTENTION
Task: C:\Windows\Tasks\a3d3ef0c-0c9a-4d1f-b748-fcdc5f85c0b4-3.job => C:\Program Files\CinemaPlus-3.2cV25.05\a3d3ef0c-0c9a-4d1f-b748-fcdc5f85c0b4-3.exe <==== ATTENTION
Task: C:\Windows\Tasks\a3d3ef0c-0c9a-4d1f-b748-fcdc5f85c0b4-4.job => C:\Program Files\CinemaPlus-3.2cV25.05\a3d3ef0c-0c9a-4d1f-b748-fcdc5f85c0b4-4.exe <==== ATTENTION
Task: C:\Windows\Tasks\a3d3ef0c-0c9a-4d1f-b748-fcdc5f85c0b4-5.job => C:\Program Files\CinemaPlus-3.2cV25.05\a3d3ef0c-0c9a-4d1f-b748-fcdc5f85c0b4-5.exe <==== ATTENTION
Task: C:\Windows\Tasks\a3d3ef0c-0c9a-4d1f-b748-fcdc5f85c0b4-5_user.job => C:\Program Files\CinemaPlus-3.2cV25.05\a3d3ef0c-0c9a-4d1f-b748-fcdc5f85c0b4-5.exe <==== ATTENTION
Task: C:\Windows\Tasks\a3d3ef0c-0c9a-4d1f-b748-fcdc5f85c0b4-6.job => C:\Program Files\CinemaPlus-3.2cV25.05\a3d3ef0c-0c9a-4d1f-b748-fcdc5f85c0b4-6.exe <==== ATTENTION
Task: C:\Windows\Tasks\a3d3ef0c-0c9a-4d1f-b748-fcdc5f85c0b4-7.job => C:\Program Files\CinemaPlus-3.2cV25.05\a3d3ef0c-0c9a-4d1f-b748-fcdc5f85c0b4-7.exe <==== ATTENTION
Task: C:\Windows\Tasks\APSnotifierPP1.job => C:\Program Files\AnyProtectEx\AnyProtect.exe <==== ATTENTION
Task: C:\Windows\Tasks\APSnotifierPP2.job => C:\Program Files\AnyProtectEx\AnyProtect.exe <==== ATTENTION
Task: C:\Windows\Tasks\APSnotifierPP3.job => C:\Program Files\AnyProtectEx\AnyProtect.exe <==== ATTENTION
Task: C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job => C:\Program Files\globalUpdate\Update\globalupdate.exe <==== ATTENTION
S3 taphss; system32\DRIVERS\taphss.sys [X]
S3 taphss6; system32\DRIVERS\taphss6.sys [X]
C:\Users\Bar Sklep\AppData\Local\BIT8C4E.tmp
C:\Users\Bar Sklep\AppData\Local\nsg54CB.tmp
C:\Users\Bar Sklep\AppData\Local\nsjAE2E.tmp
C:\Users\Bar Sklep\AppData\Local\nskEE43.tmp
C:\Users\Bar Sklep\AppData\Local\Temp.dat
C:\Users\Bar Sklep\AppData\Local\{419C6147-A20A-4378-8329-1549C445917F}
C:\Users\Bar Sklep\AppData\Local\{66DFA71E-B0C4-43ED-ACED-C3A475E98E2A}
C:\Users\Bar Sklep\AppData\Local\{C93F00F7-9B97-4B43-9C0C-78667387B461}
) C:\Program Files\globalUpdate\Update\globalupdate.exe
FF Plugin: @staging.google.com/globalUpdate Update;version=10 -> C:\Program Files\globalUpdate\Update\1.3.25.0\npglobalupdateUpdate4.dll [2015-05-25] (globalUpdate)
FF Plugin: @staging.google.com/globalUpdate Update;version=4 -> C:\Program Files\globalUpdate\Update\1.3.25.0\npglobalupdateUpdate4.dll [2015-05-25] (globalUpdate)
EmptyTemp:
- Zapisz na pulpicie jako fixlist.txt
- Uruchom FRST (z pulpitu)
- Wciśnij przycisk FIX
- Zostanie wygenerowany fixlog.txt - pokaż go (na www.wklej.org)