Komp muli, masa reklam mimo potraktowania AdwCleanerem i Adblockiem

mac88 · 16 Kwiecień 2015 23:49

Addition: http://www.wklej.org/id/1689998/

Shortcut: http://www.wklej.org/id/1689999/

Atis · 17 Kwiecień 2015 00:03

Wklej do systemowego notatnika i zapisz jako plik tekstowy o nazwie fixlist :

ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => No File
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO: No Name -> {11111111-1111-1111-1111-110511131190} -> No File
BHO: No Name -> {11111111-1111-1111-1111-110511331160} -> No File
BHO-x32: No Name -> {11111111-1111-1111-1111-110511131190} -> No File
BHO-x32: No Name -> {11111111-1111-1111-1111-110511331160} -> No File
BHO-x32: No Name -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> No File
BHO-x32: No Name -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> No File
BHO-x32: No Name -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> No File
Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No File
FF ExtraCheck: C:\Program Files (x86)\mozilla firefox\browser\defaults\preferences\my-prefs.js [2015-04-16] <==== ATTENTION (Points to *.cfg file)
FF ExtraCheck: C:\Program Files (x86)\mozilla firefox\my.cfg [2015-04-16] <==== ATTENTION
CHR HKLM-x32\...\Chrome\Extension: [pelmeidfhdlhlbjimpabfcbnnojbboma] - C:\Users\MIKI\AppData\Local\Google\Chrome\User Data\Default\Extensions\newtabv3.crx [2014-06-20]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]
2015-04-16 21:05 - 2015-04-16 21:05 - 00442264 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\ofvbzyqm.sys
2015-04-16 21:01 - 2015-04-16 21:01 - 00442264 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\kxsdcyhr.sys
2015-04-16 20:39 - 2015-04-16 20:41 - 00000000 ____ D () C:\AdwCleaner
2015-04-04 00:19 - 2015-04-16 20:42 - 00000004 _____ () C:\Windows\SysWOW64\029B560A371F4E00AB32838EBC01B9E7
2015-03-31 10:14 - 2015-03-31 10:14 - 00004387 _____ () C:\Users\TEMP\AppData\Roaming\YNdwKIdIIyYJWL7qLSJ4uQFb
2015-03-31 10:14 - 2015-03-31 10:14 - 00004387 _____ () C:\Users\Default\AppData\Roaming\YVLNaQEx7yj5jRoSInoaWqRv1
2015-03-31 10:14 - 2015-03-31 10:14 - 00004387 _____ () C:\Users\Default User\AppData\Roaming\YVLNaQEx7yj5jRoSInoaWqRv1
2014-06-28 12:44 - 2014-06-28 12:44 - 6010880 _____ () C:\Program Files (x86)\GUTAE3A.tmp
Task: {0BCC38CC-2B04-4292-AF3B-866640FC97C0} - System32\Tasks\{45C8486D-5231-40BF-A944-D1BEF43177A3} => C:\Users\MIKI\Downloads\MacTypeInstaller_2013_1231_0.exe
Task: {45B6FFC2-721F-4225-B179-137A8916428D} - System32\Tasks\miss_sunshine_notification_service => C:\Program Files (x86)\miss sunshine\miss_sunshine_notification_service.exe [2015-04-03] (FileProperties_CompanyName) <==== ATTENTION
Task: {62F1AF33-C52C-43B9-838E-CAD8FD243EF3} - System32\Tasks\{7CB3BD2E-FA95-4FC1-A86D-6AB6EE13969C} => Chrome.exe http://ui.skype.com/ui/0/6.11.60.102/pl/go/help.faq.installer?LastError=1618
Task: {B2A004FE-504A-41B6-B1B3-3090B6CFF507} - System32\Tasks\YNdwKIdIIyYJWL7qLSJ4uQFb => C:\Users\TEMP\AppData\Roaming\YNdwKIdIIyYJWL7qLSJ4uQFb.exe [2015-04-03] () <==== ATTENTION
Task: {CD3C483E-0B76-4787-8D15-22C9432EA5FC} - System32\Tasks\{BB4C752F-3603-49C5-8834-B2E1243E4480} => pcalua.exe -a "C:\Program Files (x86)\Rhinoceros 5\System\InstallLicense.exe" -d "C:\Program Files (x86)\Rhinoceros 5\System" -c /validate {60515F84-8F7F-41da-801D-1C87E32F88F5} /locale=1045
Task: {DA82AB72-EB8F-419F-914D-BB8867663B35} - System32\Tasks\YVLNaQEx7yj5jRoSInoaWqRv1 => C:\Users\Default\AppData\Roaming\YVLNaQEx7yj5jRoSInoaWqRv1.exe [2015-04-03] () <==== ATTENTION
Task: {E623BB6D-B7E3-41B8-9D48-5BA14406C8CF} - System32\Tasks\{E06336A0-9316-4871-AB20-E5AEB9B9CA9C} => pcalua.exe -a "C:\Program Files (x86)\Total-1.8\Uninstall.exe" -c /fcp=1
Task: {F050DCFA-DD8E-467A-8976-BBC9244DACB8} - System32\Tasks\{57C44B6D-F04F-4A8A-A1E4-DB88F712812D} => C:\Users\MIKI\Downloads\MacTypeInstaller_2013_1231_0.exe
Task: {F7FB66AB-DAFE-44D2-8505-E3AA645BD9E9} - System32\Tasks\miss_sunshine_updating_service => C:\Program Files (x86)\miss sunshine\miss_sunshine_updating_service.exe [2015-04-03] () <==== ATTENTION
Task: C:\Windows\Tasks\miss_sunshine_notification_service.job => C:\Program Files (x86)\miss sunshine\miss_sunshine_notification_service.exeé/url='http:/cdn.selectbestopt.com/notf_sys/index.html' /crregname='miss sunshine' /appid='73143' /srcid='2913' /bic='eaa06774f48a6288320eb221caa52cee' /verifier='35b00f46e1319f950181582cd044344c' /installerversion='1.50.3.10' /statsdomain='http:/stats.buildomserv.com/data.gif?' /errorsdomain='http:/stats.buildomserv.com/data.gif?' /monetizationdomain='http:/logs.buildomserv.com/monetization.gif <==== ATTENTION
Task: C:\Windows\Tasks\miss_sunshine_updating_service.job => C:\Program Files (x86)\miss sunshine\miss_sunshine_updating_service.exe® /campid=2913 /verid=1 /url=http:/cdn.buildomserv.com/txt/@CAMPID@/@VER@/file.txt /appid=73143 /taskname=miss_sunshine_updating_service /funurl=http:/stats.buildomserv.com <==== ATTENTION
Task: C:\Windows\Tasks\YNdwKIdIIyYJWL7qLSJ4uQFb.job => C:\Users\TEMP\AppData\Roaming\YNdwKIdIIyYJWL7qLSJ4uQFb.exe <==== ATTENTION
Task: C:\Windows\Tasks\YVLNaQEx7yj5jRoSInoaWqRv1.job => C:\Users\Default\AppData\Roaming\YVLNaQEx7yj5jRoSInoaWqRv1.exe <==== ATTENTION
C:\Users\TEMP\AppData\Roaming\*.exe
C:\Users\Default\AppData\Roaming\*.exe
C:\Users\Default User\AppData\Roaming\*.exe
EmptyTemp:

Uruchom FRST i kliknij Fix. Pokaż raport z usuwania Fixlog.

Kliknij Scan i pokaż nowy raport z FRST bez Addition.