Browser Champion - jak usunąć?


(Lysy_cienias) #1

Additional

 

http://www.wklej.org/id/1482183/

 

FRST

 

http://www.wklej.org/id/1482179/


(Acorus) #2

Odinstaluj SpyHunter.Pobierz i uruchom AdwCleaner https://toolslib.net/downloads/finish/1/ Kliknij Szukaj i później Usuń.

Pokaż nowe logi z FRST.


(Lysy_cienias) #3

log FRST

 

http://www.wklej.org/id/1482415/


(Acorus) #4

Otwórz Notatnik i wklej:

GroupPolicy: Group Policy on Chrome detected ======= ATTENTION
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKCU - {13CC6647-DD4A-476A-9EEE-B507CA35B7D4} URL = http://rover.ebay.com/rover/1/4908-44618-9400-8/4?satitle={searchTerms}
SearchScopes: HKCU - {CD9911B8-D0E3-49DB-AF85-20243347B77C} URL = http://www.amazon.co.uk/gp/search?ie=UTF8keywords={searchTerms}tag=tochibauk-win7-ie-search-21index=blendedlinkCode=ur2
Hosts:
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\mystartsearch.xml
FF Extension: Fast Start - C:\Users\Hrabia\AppData\Roaming\Mozilla\Firefox\Profiles\yjadng1y.default\Extensions\faststartff@gmail.com [2014-10-08]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction ======= ATTENTION
S3 esgiguard; \\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [X]
S3 Prot6Flt; system32\DRIVERS\Prot6Flt.sys [X]
2014-10-08 13:16 - 2014-10-08 13:44 - 00000000 ____ D () C:\AdwCleaner
2014-10-08 02:35 - 2014-10-08 13:10 - 00000000 ____ D () C:\Windows\ACF5FE1B377240688B872D2A6EFD0A05.TMP
2014-10-08 02:35 - 2014-10-08 02:35 - 00000000 ____ D () C:\Program Files\Enigma Software Group
2014-10-08 02:34 - 2014-10-08 02:34 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\Hrabia\Downloads\SpyHunter-Installer.exe
2014-10-08 01:58 - 2014-10-08 13:45 - 00001340 _____ () C:\Windows\Tasks\XKAOD.job
2014-10-08 01:58 - 2014-10-08 01:58 - 01489824 _____ (end) C:\Users\Hrabia\AppData\Roaming\XKAOD.exe
2014-10-08 01:58 - 2014-10-08 01:58 - 00004364 _____ () C:\Windows\System32\Tasks\XKAOD
2014-10-08 01:58 - 2014-10-08 01:58 - 00003222 _____ () C:\Windows\System32\Tasks\bench-S-1-5-21-882791433-3015492900-3782709270-1000
2014-10-08 01:57 - 2014-10-08 13:45 - 00001690 _____ () C:\Windows\Tasks\LXIHAWJO.job
2014-10-08 01:57 - 2014-10-08 01:57 - 01955232 _____ (end) C:\Users\Hrabia\AppData\Roaming\LXIHAWJO.exe
2014-10-08 01:57 - 2014-10-08 01:57 - 00004714 _____ () C:\Windows\System32\Tasks\LXIHAWJO
2014-10-08 01:57 - 2014-10-08 01:57 - 00000000 ____ D () C:\Users\Hrabia\AppData\Local\globalUpdate
2014-10-07 19:15 - 2014-10-07 19:15 - 00003176 _____ () C:\Windows\System32\Tasks\{93093CF3-78B7-41AC-B732-95FA52D70817}
EmptyTemp:

Plik zapisz pod nazwą fixlist.txt i umieść obok FRST w tym samym folderze.