FRST : http://wklej.org/id/1606771/
Addition : http://wklej.org/id/1606772/
Odinstaluj Akamai NetSession Interface.Otwórz notatnik systemowy i wklej:
Task: {7D3E14E6-623B-4BD9-8B99-BBAFB0AD607F} - System32\Tasks\0414bUpdateInfo = C:\ProgramData\Avg_Update_0414b\0414b_AVG-Secure-Search-Update.exe
Task: {E1F6C6EE-F583-4C45-8FEE-E19F594E5A2A} - \Program aktualizacji online firmy Adobe. No Task File ==== ATTENTION
HKLM\...\Run: [AdobeAAMUpdater-1.0] = C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [558496 2014-02-27] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [NeroCheck] = C:\Windows\SysWOW64\NeroCheck.exe [155648 2001-07-09] (Ahead Software Gmbh)
HKU\S-1-5-21-2494852391-279271484-1496418158-1000\...\Run: [Akamai NetSession Interface] = C:\Users\Mateusz\AppData\Local\Akamai\netsession_win.exe [4673432 2014-10-29] (Akamai Technologies, Inc.)
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.mystartsearch.com/?type=hpts=1421089604from=wpcuid=WDCXWD10EARS-00MVWB0_WD-WCAZA745019150191
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.mystartsearch.com/?type=hpts=1421089604from=wpcuid=WDCXWD10EARS-00MVWB0_WD-WCAZA745019150191
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.mystartsearch.com/web/?type=dsts=1421089604from=wpcuid=WDCXWD10EARS-00MVWB0_WD-WCAZA745019150191q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://www.mystartsearch.com/web/?type=dsts=1421089604from=wpcuid=WDCXWD10EARS-00MVWB0_WD-WCAZA745019150191q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.mystartsearch.com/?type=hpts=1421089604from=wpcuid=WDCXWD10EARS-00MVWB0_WD-WCAZA745019150191
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.mystartsearch.com/?type=hpts=1421089604from=wpcuid=WDCXWD10EARS-00MVWB0_WD-WCAZA745019150191
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.mystartsearch.com/web/?type=dsts=1421089604from=wpcuid=WDCXWD10EARS-00MVWB0_WD-WCAZA745019150191q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.mystartsearch.com/web/?type=dsts=1421089604from=wpcuid=WDCXWD10EARS-00MVWB0_WD-WCAZA745019150191q={searchTerms}
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe http://www.mystartsearch.com/?type=scts=1421089604from=wpcuid=WDCXWD10EARS-00MVWB0_WD-WCAZA745019150191
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.mystartsearch.com/web/?type=dsts=1421089604from=wpcuid=WDCXWD10EARS-00MVWB0_WD-WCAZA745019150191q={searchTerms}
SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.mystartsearch.com/web/?type=dsts=1421089604from=wpcuid=WDCXWD10EARS-00MVWB0_WD-WCAZA745019150191q={searchTerms}
SearchScopes: HKLM-x32 - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.mystartsearch.com/web/?type=dsts=1421089604from=wpcuid=WDCXWD10EARS-00MVWB0_WD-WCAZA745019150191q={searchTerms}
SearchScopes: HKLM-x32 - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.mystartsearch.com/web/?type=dsts=1421089604from=wpcuid=WDCXWD10EARS-00MVWB0_WD-WCAZA745019150191q={searchTerms}
SearchScopes: HKU\S-1-5-21-2494852391-279271484-1496418158-1000 - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL =
FF HKLM-x32\...\Firefox\Extensions: [fftoolbar2014@etech.com] - C:\Users\Mateusz\AppData\Roaming\Mozilla\Firefox\Profiles\wcl84217.default\extensions\fftoolbar2014@etech.com
R2 vToolbarUpdater3.2.0; C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\3.2.0\ToolbarUpdater.exe [1843736 2014-08-29] (AVG Secure Search)
U3 az3ezjoi; C:\Windows\System32\Drivers\az3ezjoi.sys [0] (Advanced Micro Devices) ==== ATTENTION (zero size file/folder)
S3 EagleX64; \\C:\Windows\system32\drivers\EagleX64.sys [X]
EmptyTemp:
Plik zapisz pod nazwą fixlist.txt i umieść obok FRST w tym samym folderze.