Greener Web - komputer chodzi jak czołg


(Amichami) #1

Jak w temacie 

 

Proszę o pomoc 

FRST http://www.wklejto.pl/224811

Additional http://www.wklejto.pl/224812


(Acorus) #2

Odinstaluj Adobe Reader 9.3 - Polish,Yahoo! Search.Otwórz notatnik systemowy i wklej:

Task: {33C4A724-0AAA-4058-9D86-CC776AB846A0} - System32\Tasks\Yahoo! Search Udpater = C:\Users\ADMIN\AppData\Local\Pay-By-Ads\Yahoo! Search\1.3.12.4\dsrsetup.exe [2014-10-04] (Pay By Ads LTD) ==== ATTENTION
Task: {EE9536B6-D7B1-48E9-B4BF-1F7C8989041F} - System32\Tasks\Yahoo! Search = C:\Users\ADMIN\AppData\Local\Pay-By-Ads\Yahoo! Search\1.3.12.4\dsrlte.exe [2014-10-04] (Pay By Ads LTD) ==== ATTENTION
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] = C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe [35760 2009-12-22] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe ARM] = C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [948672 2009-12-11] (Adobe Systems Incorporated)
HKU\S-1-5-21-3512287936-1803359588-3119558698-1000\...\Run: [Yahoo! Search] = C:\Users\ADMIN\AppData\Local\Pay-By-Ads\Yahoo! Search\1.3.12.4\dsrlte.exe [438632 2014-10-04] (Pay By Ads LTD)
HKU\S-1-5-21-3512287936-1803359588-3119558698-1000\...\Run: [pricefountainw.exe] = C:\Users\ADMIN\AppData\Local\PriceFountain\pricefountainw.exe [462336 2015-02-08] (Price Fountain)
HKU\S-1-5-21-3512287936-1803359588-3119558698-1000\...\MountPoints2: F - F:\LaunchU3.exe -a
HKU\S-1-5-21-3512287936-1803359588-3119558698-1000\...\MountPoints2: {0d29d1f6-ecbf-11e3-a74f-60eb693d6e71} - F:\LaunchU3.exe -a
HKU\S-1-5-21-3512287936-1803359588-3119558698-1000\...\MountPoints2: {33aaa908-ecbc-11e3-861b-806e6f6e6963} - E:\Autorun.exe
GroupPolicy: Group Policy on Chrome detected ======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction ======= ATTENTION
BHO-x32: PriceFountain - {b608cc98-54de-4775-96c9-097de398500c} - C:\Users\ADMIN\AppData\Local\PriceFountain\PriceFountainIE.dll [2015-01-11] ()
FF SearchPlugin: C:\Users\ADMIN\AppData\Roaming\Mozilla\Firefox\Profiles\xf6gyk4y.default\searchplugins\dsrlte.xml [2014-10-04]
FF Extension: PriceFountain - C:\Users\ADMIN\AppData\Roaming\Mozilla\Firefox\Profiles\xf6gyk4y.default\Extensions\{b6a94784-0ffb-4121-88c6-435139067ee2}.xpi [2015-02-12]
CHR Extension: (Greener Web) - C:\Users\ADMIN\AppData\Local\Google\Chrome\User Data\Default\Extensions\gjjofdeodiofmmdlnbgpeekgefglmkfj [2014-10-02]
S2 Update Greener Web; "C:\Program Files (x86)\Greener Web\updateGreenerWeb.exe" [X]
R1 {a3f28269-ad17-41a8-b032-3e0313ef8979}Gw64; C:\Windows\System32\drivers\{a3f28269-ad17-41a8-b032-3e0313ef8979}Gw64.sys [61120 2014-06-11] (StdLib)
R1 {a3f28269-ad17-41a8-b032-3e0313ef8979}w64; C:\Windows\System32\drivers\{a3f28269-ad17-41a8-b032-3e0313ef8979}w64.sys [61120 2014-06-16] (StdLib)
2015-03-27 01:36 - 2015-03-27 01:36 - 00000000 ____ D () C:\6629e470ad114a09bc261875704410
EmptyTemp:

Plik zapisz pod nazwą fixlist.txt i umieść obok FRST w tym samym folderze.


(Amichami) #3

Dzieki, teraz wszystko smiga :slight_smile:


(Acorus) #4

Skasuj folder C:\FRST