Witam.
Od jakiegoś czasu siostra ma problemy ze swoim laptopem. Na początku fajnie chodził, ale od jakiegoś miesiąca zaczął mulić.
Dodam jeszcze, że zaczęły wyskakiwać jakieś dziwne reklamy w przeglądarce firefox. Adblock nic nie pomógł.
OTL - http://www.wklej.org/id/1578040/
Extras - http://www.wklej.org/id/1578041/
FRST - http://www.wklej.org/id/1578046/
Addition - http://www.wklej.org/id/1578047/
Odinstaluj DealPly.Otwórz notatnik systemowy i wklej:
Task: {790571A4-18A2-4260-89D4-423D1464B798} - System32\Tasks\DealPly = C:\Users\aga\AppData\Roaming\DealPly\UPDATE~1\UPDATE~1.EXE ==== ATTENTION
Task: {B94EF3AB-FC32-4570-A835-064299940315} - System32\Tasks\DealPlyUpdate = C:\Program Files\DealPly\DealPlyUpdate.exe ==== ATTENTION
Task: {D01A27E9-7DA4-400D-A5C2-8527A43A0919} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-3687189492-3849922992-1278370942-1000Core = C:\Users\aga\AppData\Local\Facebook\Update\FacebookUpdate.exe [2013-03-19] (Facebook Inc.)
Task: {F1EF2568-809D-4ED1-8419-406625B5853D} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-3687189492-3849922992-1278370942-1000UA = C:\Users\aga\AppData\Local\Facebook\Update\FacebookUpdate.exe [2013-03-19]
Task: C:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3687189492-3849922992-1278370942-1000Core.job = C:\Users\aga\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3687189492-3849922992-1278370942-1000UA.job = C:\Users\aga\AppData\Local\Facebook\Update\FacebookUpdate.exe
HKLM\...\Run: [RtHDVCpl] = C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [8555040 2010-04-07] (Realtek Semiconductor)
HKLM\...\Run: [UCam_Menu] = C:\Program Files\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe [222504 2009-05-19] (CyberLink Corp.)
HKLM\...\Run: [GrooveMonitor] = C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM\...\Run: [SunJavaUpdateSched] = C:\Program Files\Common Files\Java\Java Update\jusched.exe [271744 2014-09-26] (Oracle Corporation)
HKU\S-1-5-21-3687189492-3849922992-1278370942-1000\...\Run: [Google Update] = C:\Users\aga\AppData\Local\Google\Update\GoogleUpdate.exe [107912 2014-10-16] (Google Inc.)
HKU\S-1-5-21-3687189492-3849922992-1278370942-1000\...\Run: [Facebook Update] = C:\Users\aga\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2013-03-19] (Facebook Inc.)
HKU\S-1-5-21-3687189492-3849922992-1278370942-1000\...\MountPoints2: F - F:\AutoRun.exe
HKU\S-1-5-21-3687189492-3849922992-1278370942-1000\...\MountPoints2: {1a863be0-4d97-11e0-8e5e-001bb167e500} - F:\AutoRun.exe
HKU\S-1-5-21-3687189492-3849922992-1278370942-1000\...\MountPoints2: {210b6040-830e-11e1-b01b-806e6f6e6963} - G:\Start.exe
HKU\S-1-5-21-3687189492-3849922992-1278370942-1000\...\MountPoints2: {9fbd51bd-45bb-11e0-b929-001bb167e500} - E:\AutoRun.exe
HKU\S-1-5-21-3687189492-3849922992-1278370942-1000\...\MountPoints2: {9fbd51ce-45bb-11e0-b929-001bb167e500} - E:\AutoRun.exe
HKU\S-1-5-21-3687189492-3849922992-1278370942-1000\...\MountPoints2: {be10d960-5f5c-11e0-8e0d-001bb167e500} - E:\AutoRun.exe
Startup: C:\Users\aga\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Tworzenie wycinków ekranu i uruchamianie programu OneNote 2007.lnk
ShortcutTarget: Tworzenie wycinków ekranu i uruchamianie programu OneNote 2007.lnk - C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)
GroupPolicy: Group Policy on Chrome detected ======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction ======= ATTENTION
SearchScopes: HKU\S-1-5-21-3687189492-3849922992-1278370942-1000 - DefaultScope {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = http://search.babylon.com/?q={searchTerms}affID=110819tt=010712_3babsrc=SP_ssmntrId=842072f7000000000000001bb18c0374
SearchScopes: HKU\S-1-5-21-3687189492-3849922992-1278370942-1000 - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = http://search.babylon.com/?q={searchTerms}affID=110819tt=010712_3babsrc=SP_ssmntrId=842072f7000000000000001bb18c0374
BHO: No Name - {F5CC7F02-6F4E-4462-B5B1-394A57FD3E0D} - No File
FF Extension: Better-Fox - C:\Users\aga\AppData\Roaming\Mozilla\Firefox\Profiles\fxvuindu.default\Extensions\{9ee1c043-893a-4b68-a804-54db7cc4de3b} [2014-12-22]
CHR Extension: (DigiHelp) - C:\Users\aga\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfcipbockahmmgdfbpmpigdibjafjloj [2014-12-23]
S3 EagleXNt; \\C:\windows\system32\drivers\EagleXNt.sys [X]
S3 ew_hwusbdev; system32\DRIVERS\ew_hwusbdev.sys [X]
S3 huawei_cdcacm; system32\DRIVERS\ew_jucdcacm.sys [X]
S3 huawei_enumerator; system32\DRIVERS\ew_jubusenum.sys [X]
EmptyTemp:
Plik zapisz pod nazwą fixlist.txt i umieść obok FRST w tym samym folderze.
Skasuj folder C:\FRST
Skasowane.
