A teraz websserches


(Erykwin) #1

FRST http://wklej.org/id/1563576/

ADDITION http://wklej.org/id/1563577/

 

czy mozna sie w jakis sposob przed tymi glupotami uchronic???


(Atis) #2

Przestań instalować szkodliwe dodatki: KLIK - KLIK - KLIK - KLIK

Pobierz i uruchom AdwCleaner Kliknij Szukaj i później Usuń.

Wklej do systemowego notatnika i zapisz jako plik tekstowy o nazwie fixlist :

HKLM-x32\...\Run: [YTDownloader] => "C:\Program Files (x86)\YTDownloader\YTDownloader.exe" /boot
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-944188693-1190220488-23711694-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
S1 ccnfd_1_10_0_4; system32\drivers\ccnfd_1_10_0_4.sys [X]
CHR HomePage: Default -> hxxp://istart.webssearches.com/?type=hp&ts=1419096439&from=exp&uid=APPLEXHDDXHTS547550A9E384_J2260051KWRNUDKWRNUDX
CHR StartupUrls: Default -> "hxxp://istart.webssearches.com/?type=hp&ts=1419096439&from=exp&uid=APPLEXHDDXHTS547550A9E384_J2260051KWRNUDKWRNUDX"
CHR DefaultSearchKeyword: Default -> webssearches
C:\Program Files (x86)\predm
C:\ProgramData\1837308050
C:\AdwCleaner
C:\Program Files (x86)\f70544b8-d085-45ff-b01a-a8473313c3f2
C:\Users\Eryk\AppData\Roaming\*.exe
C:\Users\Eryk\AppData\Local\nslCEF5.tmp
C:\Program Files (x86)\STab
C:\ProgramData\IHProtectUpDate
C:\Program Files (x86)\v9Soft
Task: {58234CF3-D39A-4FB2-8BAF-37FDD3C5D866} - System32\Tasks\Microsoft\Windows\Maintenance\SMupdate2 => Rundll32.exe C:\PROGRA~1\COMMON~1\System\SysMenu.dll ,Command701 update2 <==== ATTENTION
Task: {B547DD85-492E-4142-A52E-25F38D78E37B} - System32\Tasks\TVOI => C:\Users\Eryk\AppData\Roaming\TVOI.exe [2014-12-20] (Object Browser) <==== ATTENTION
Task: {ECB8E4E7-5EF1-48B4-82CB-9CE5C213341D} - System32\Tasks\Microsoft\Windows\Multimedia\SMupdate3 => Rundll32.exe C:\PROGRA~1\COMMON~1\System\SysMenu.dll ,Command701 update3 <==== ATTENTION
Task: C:\Windows\Tasks\TVOI.job => C:\Users\Eryk\AppData\Roaming\TVOI.exe <==== ATTENTION
EmptyTemp:

Uruchom FRST i kliknij Fix. Pokaż raport z usuwania Fixlog.

Kliknij Scan i pokaż nowy raport z FRST bez Addition.