Pomocy!
Mam już dość tego badziewa. Znacznie utrudnia mi pracę na lapku - to jakaś udręka…
Logi:
Odinstaluj Smart File Advisor 1.1.6,Update for PriceFountain.Otwórz notatnik systemowy i wklej:
Task: {70FCE809-F71B-4715-B47D-12A170F6DC82} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-4009453734-1270112612-1809519131-1000Core = C:\Users\Magda\AppData\Local\Facebook\Update\FacebookUpdate.exe [2014-06-28] (Facebook Inc.)
Task: {C6F34481-F3A4-44F8-A72E-64B32C152418} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-4009453734-1270112612-1809519131-1000UA = C:\Users\Magda\AppData\Local\Facebook\Update\FacebookUpdate.exe [2014-06-28] (Facebook Inc.)
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-4009453734-1270112612-1809519131-1000Core.job = C:\Users\Magda\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-4009453734-1270112612-1809519131-1000UA.job = C:\Users\Magda\AppData\Local\Facebook\Update\FacebookUpdate.exe
HKLM-x32\...\Run: [GrooveMonitor] = C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM-x32\...\Run: [SFAUpdater] = C:\Program Files (x86)\Smart File Advisor\SFAUpdater.exe [655472 2014-10-10] (Filefacts.net)
GroupPolicy: Group Policy on Chrome detected ======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction ======= ATTENTION
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction ======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.yac.mx/?utm_source=butm_medium=iSafefrom=iSafeuid=toshibaxmk6465gsxn_81ibp0o1txx81ibp0o1t
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://search.yac.mx/?utm_source=butm_medium=iSafefrom=iSafeuid=toshibaxmk6465gsxn_81ibp0o1txx81ibp0o1t
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://search.yac.mx/?utm_source=butm_medium=iSafefrom=iSafeuid=toshibaxmk6465gsxn_81ibp0o1txx81ibp0o1t
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://search.yac.mx/?utm_source=butm_medium=iSafefrom=iSafeuid=toshibaxmk6465gsxn_81ibp0o1txx81ibp0o1t
HKU\S-1-5-19\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.yac.mx/?utm_source=butm_medium=iSafefrom=iSafeuid=toshibaxmk6465gsxn_81ibp0o1txx81ibp0o1t
HKU\S-1-5-19\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://search.yac.mx/?utm_source=butm_medium=iSafefrom=iSafeuid=toshibaxmk6465gsxn_81ibp0o1txx81ibp0o1t
HKU\S-1-5-20\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.yac.mx/?utm_source=butm_medium=iSafefrom=iSafeuid=toshibaxmk6465gsxn_81ibp0o1txx81ibp0o1t
HKU\S-1-5-20\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://search.yac.mx/?utm_source=butm_medium=iSafefrom=iSafeuid=toshibaxmk6465gsxn_81ibp0o1txx81ibp0o1t
SearchScopes: HKLM - DefaultScope {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL =
FF Homepage: hxxp://search.yac.mx/?utm_source=butm_medium=iSafefrom=iSafeuid=toshibaxmk6465gsxn_81ibp0o1txx81ibp0o1t
FF NewTab: hxxp://search.yac.mx/?utm_source=butm_medium=iSafefrom=iSafeuid=toshibaxmk6465gsxn_81ibp0o1txx81ibp0o1t
FF SearchPlugin: C:\Users\Magda\AppData\Roaming\Mozilla\Firefox\Profiles\p03n1np7.default\searchplugins\Yahoo!.xml
S1 iSafeKrnlMon; \\C:\Program Files (x86)\Elex-tech\YAC\iSafeKrnlMon.sys [X]
EmptyTemp:
Plik zapisz pod nazwą fixlist.txt i umieść obok FRST w tym samym folderze.
Wszystko gra :)
Wielkie dzięki!
Skasuj folder C:\FRST