Witam,w ostatnim czasie przy każdym kliknięciu w jakikolwiek link przenosi mnie automatycznie na różne strony typu :
http://play.quiz-fun.com.my/lpx/k7LJIW080C?aff=ck-revz&reqid=586751559&oid=3368&s1=121006|
Mam zainstalowanego adblocka jednak to nie pomaga,bardzo bym prosił o pomoc w rozwiazaniu tego problemu:
FRST: http://wklej.org/id/1803759/
addition: http://wklej.org/id/1803761/
Dziękuje za pomoc.
Odinstaluj McAfee Internet Security,McAfee Security Scan Plus,RelevantKnowledge.Otwórz notatnik systemowy i wklej:
Task: {36940E6F-2641-405D-AA3D-B4124D5BA31E} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-4118357205-2848147238-3195359700-1002Core = C:\Users\PC\AppData\Local\Facebook\Update\FacebookUpdate.exe [2014-05-28] (Facebook Inc.)
Task: {68593285-9C8B-4885-9D67-ADA9757C7F8F} - System32\Tasks\1014avUpdateInfo = C:\ProgramData\Avg_Update_1014av\1014av_AVG-Secure-Search-Update.exe [2014-09-23] ()
Task: {710F898D-875C-40E1-88A7-C926E1796D39} - System32\Tasks\Yahoo! Search Updater = C:\Users\PC\AppData\Local\Pay-By-Ads\Yahoo! Search\1.3.15.4\dsrsetup.exe ==== ATTENTION
Task: {8CB9AA84-E77A-4AD8-952E-492191B2B3FD} - System32\Tasks\Yahoo! Search = C:\Users\PC\AppData\Local\Pay-By-Ads\Yahoo! Search\1.3.15.4\dsrlte.exe ==== ATTENTION
Task: {91E08887-D162-48CA-B320-B8CA123A33BA} - System32\Tasks\1214avUpdateInfo = C:\ProgramData\Avg_Update_1214av\1214av_AVG-Secure-Search-Update.exe [2014-10-26] ()
Task: C:\WINDOWS\Tasks\1014avUpdateInfo.job = C:\ProgramData\Avg_Update_1014av\1014av_AVG-Secure-Search-Update.exe
Task: C:\WINDOWS\Tasks\1214avUpdateInfo.job = C:\ProgramData\Avg_Update_1214av\1214av_AVG-Secure-Search-Update.exe
Task: C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-4118357205-2848147238-3195359700-1002Core.job = C:\Users\PC\AppData\Local\Facebook\Update\FacebookUpdate.exe
HKLM\...\Policies\Explorer: [NoFolderOptions] 0
HKLM\...\Policies\Explorer: [NoControlPanel] 0
HKU\S-1-5-21-4118357205-2848147238-3195359700-1002\...\RunOnce: [Adobe Speed Launcher] = 1420812469
HKU\S-1-5-21-4118357205-2848147238-3195359700-1002\...\Policies\Explorer: []
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk
ShortcutTarget: McAfee Security Scan Plus.lnk - C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe (McAfee, Inc.)
ShellIconOverlayIdentifiers: [SugarSyncBackedUp] - {0C4A258A-3F3B-4FFF-80A7-9B3BEC139472} = C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll No File
ShellIconOverlayIdentifiers: [SugarSyncPending] - {62CCD8E3-9C21-41E1-B55E-1E26DFC68511} = C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll No File
ShellIconOverlayIdentifiers: [SugarSyncRoot] - {A759AFF6-5851-457D-A540-F4ECED148351} = C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll No File
ShellIconOverlayIdentifiers: [SugarSyncShared] - {1574C9EF-7D58-488F-B358-8B78C1538F51} = C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll No File
GroupPolicy: Group Policy on Chrome detected ======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction ======= ATTENTION
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction ======= ATTENTION
HKU\S-1-5-21-4118357205-2848147238-3195359700-1002\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction ======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
SearchScopes: HKU\.DEFAULT - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-4118357205-2848147238-3195359700-1002 - {66C89479-1A3F-4B37-9A46-245B28EF2CD6} URL =
BHO-x32: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.8.150\McAfeeMSS_IE.dll (McAfee, Inc.)
CHR DefaultSearchURL: Default - http://rts.dsrlte.com/?q={searchTerms}
2015-01-09 15:06 - 2013-11-11 10:37 - 00000000 ____ D () C:\AdwCleaner
EmptyTemp:
Plik zapisz pod nazwą fixlist.txt i umieść obok FRST w tym samym folderze.