Odinstaluj Spybot - Search & Destroy.Otwórz notatnik systemowy i wklej:
Task: C:\WINDOWS\Tasks\Check for updates (Spybot - Search Destroy).job = C:\Program Files\Spybot - Search Destroy 2\SDUpdate.exe
Task: C:\WINDOWS\Tasks\Powiadomienie o zakończeniu obsługi systemu Microsoft Windows XP — co miesiąc.job = C:\WINDOWS\system32\xp_eos.exe
Task: C:\WINDOWS\Tasks\Powiadomienie o zakończeniu obsługi systemu Microsoft Windows XP — logowanie.job = C:\WINDOWS\system32\xp_eos.exe
Task: C:\WINDOWS\Tasks\Refresh immunization (Spybot - Search Destroy).job = C:\Program Files\Spybot - Search Destroy 2\SDImmunize.exe
Task: C:\WINDOWS\Tasks\Scan the system (Spybot - Search Destroy).job = C:\Program Files\Spybot - Search Destroy 2\SDScan.exe
Winlogon\Notify\SDWinLogon: SDWinLogon.dll [X]
ShellIconOverlayIdentifiers: [GGDriveOverlay1] - {E68D0A50-3C40-4712-B90D-DCFA93FF2534} = Brak pliku
ShellIconOverlayIdentifiers: [GGDriveOverlay2] - {E68D0A51-3C40-4712-B90D-DCFA93FF2534} = Brak pliku
ShellIconOverlayIdentifiers: [GGDriveOverlay3] - {E68D0A52-3C40-4712-B90D-DCFA93FF2534} = Brak pliku
ShellIconOverlayIdentifiers: [GGDriveOverlay4] - {E68D0A53-3C40-4712-B90D-DCFA93FF2534} = Brak pliku
GroupPolicyScripts: Zasady grupy wykryto ======= UWAGA
GroupPolicyScripts\User: Zasady grupy wykryto ======= UWAGA
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Zasada ograniczeń ======= UWAGA
SearchScopes: HKU\S-1-5-21-1249223752-1362002350-88344421-500 - {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL =
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_32-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_05-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0032-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_32-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_32-windows-i586.cab
S4 SDScannerService; C:\Program Files\Spybot - Search Destroy 2\SDFSSvc.exe [1738168 2014-06-24] (Safer-Networking Ltd.)
S4 SDUpdateService; C:\Program Files\Spybot - Search Destroy 2\SDUpdSvc.exe [2088408 2014-06-27] (Safer-Networking Ltd.)
S4 SDWSCService; C:\Program Files\Spybot - Search Destroy 2\SDWSCSvc.exe [171928 2014-04-25] (Safer-Networking Ltd.)
S4 WdsManPro; C:\Documents and Settings\All Users\Dane aplikacji\2WdsManPro2\WdsManPro.exe [709288 2015-09-08] (DTools LIMITED)
S3 ApfiltrService; system32\DRIVERS\Apfiltr.sys [X]
S3 USBAAPL; System32\Drivers\usbaapl.sys [X]
S3 WaveFDE; system32\DRIVERS\WaveFDE.sys [X]
2015-09-07 19:27 - 2015-09-07 21:33 - 00000000 ____ D C:\Program Files\Elex-tech
EmptyTemp:
Plik zapisz pod nazwą fixlist.txt i umieść obok FRST w tym samym folderze.
Przeskanuj programem Malwarebytes Anti-Malware https://www.malwarebytes.org/downloads/