Wklej do systemowego notatnika i zapisz jako plik tekstowy o nazwie fixlist :
HKLM-x32\...\Run: [] => [X]
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => No File
ShellIconOverlayIdentifiers: [GDriveSharedOverlay] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44} => No File
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKCU - {72AED86F-B65B-4683-8AD4-7D0982A07129} URL = http://search.delta-homes.com/web/?utm_source=b&utm_medium=wpm0226&utm_campaign=installer&utm_content=ds&from=wpm0226&uid=ST9250410AS_5VG2GYRQ&ts=1393448995&type=default&q={searchTerms}
SearchScopes: HKCU - {D8F091DE-32BA-49BE-849E-4A7E2FF78DDB} URL = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT3289075&CUI=UN30959563047982500&UM=1
SearchScopes: HKCU - {D9C6D94C-F316-40D4-BA7E-A9629E317036} URL = http://start.funmoods.com/results.php?f=4&a=ironto&q={searchTerms}
BHO: No Name -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> No File
Toolbar: HKCU - No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No File
Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File
DPF: HKLM-x32 {C345E174-3E87-4F41-A01C-B066A90A49B4} http://trial.trymicrosoftoffice.com/trialoaa/buymsoffice_assets/framework//microsoft/wrc32.ocx
FF Extension: Deal Keeper - C:\Users\tescoziomy\AppData\Roaming\Mozilla\Firefox\Profiles\oe2ebiml.default\Extensions\{01a80650-4647-488c-a3c1-1b536b7406d9}.xpi [2014-10-13]
U4 eabfiltr; No ImagePath
C:\AdwCleaner
C:\found.000
C:\Users\tescoziomy\Doctor Web
C:\ProgramData\d7a0fe93-7bf3-4f3d-89c3-fe4e144b2eb8
Task: {04019446-CDC2-4A8D-B9DB-DF07D8D8CB09} - System32\Tasks\{514479AC-5441-40B9-9888-F8ECC5201D46} => Firefox.exe http://ui.skype.com/ui/0/6.21.73.104.456/pl/abandoninstall?page=tsMain
Task: {0E2AFBA5-E5FB-4CAA-9FDB-311C37134505} - System32\Tasks\AVG-Secure-Search-Update_JUNE2013_TB_rmv => C:\Windows\TEMP\{89EADC92-908B-4A07-A3DC-92E7674C9412}.exe
Task: {8F121D33-3A8E-4965-9B2A-B4E67124D611} - System32\Tasks\{5CFDA19C-FCD8-4F68-88E6-B7B65DE34AC8} => C:\Users\SUPERBOY\Downloads\extractnow.exe
Task: {76FD2030-173B-465F-8361-EE7D8F531258} - System32\Tasks\{B5475FF7-4F49-484E-8AB8-792E87E184E5} => C:\Program Files (x86)\Ubi Soft\Rayman3\Rayman3.exe
Task: C:\Windows\Tasks\AVG-Secure-Search-Update_JUNE2013_TB_rmv.job => C:\Windows\TEMP\{89EADC92-908B-4A07-A3DC-92E7674C9412}.exe
EmptyTemp:
Uruchom FRST i kliknij Fix. Pokaż raport z usuwania Fixlog.
Kliknij Scan i pokaż nowy raport z FRST bez Addition.
