Takie oto reklamy pojawiają się na każdej stronie, adblock nic nie wykrywa, więc stawiam ze to jakieś złośliwe oprogramowanie. ADWcleaner nic nie pomógł.
http://www.wklej.org/id/1563405/
Otwórz Notatnik i wklej:
IFEO\SppExtComObj.exe: [Debugger] C:\Windows\SECOH-QAD.exe
Startup: C:\Users\Adam\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\EVGA PrecisionX 16 (2).lnk
ShortcutTarget: EVGA PrecisionX 16 (2).lnk - C:\Windows\Installer\{E019FA6A-BA92-49A5-A4A6-FB7C60931643}\PrecisionX.exe11_06974D0D33644B2F8339468C2509156C.exe (No File)
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction ======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
SearchScopes: HKU\.DEFAULT - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: No Name - {451C804F-C205-4F03-B48E-537EC94937BF} - No File
FF Extension: No Name - C:\Users\gucio\AppData\Roaming\Mozilla\Firefox\Profiles\vhx6v8ru.default-1386273604991\extensions\{81BF1D23-5F17-408D-AC6B-BD6DF7CAF670} [Not Found]
FF Extension: No Name - C:\Users\gucio\AppData\Roaming\Mozilla\Firefox\Profiles\vhx6v8ru.default-1386273604991\extensions\WebSiteRecommendation@weliketheweb.com [Not Found]
FF Extension: No Name - C:\Users\Adam\AppData\Roaming\Mozilla\Firefox\Profiles\vhx6v8ru.default-1386273604991\extensions\a54e453c-130a-4769-9333-c5ec2aa914c5@9bd7cc89-9c7c-44e9-a03b-042b92d363f0.com [Not Found]
FF Extension: No Name - C:\ProgramData\Wondershare\Video Converter Ultimate\WSVCU@Wondershare.com [Not Found]
FF Extension: No Name - C:\Program Files\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} [Not Found]
CHR Extension: (BuyNeSaave) - C:\ProgramData\ckmiblianodgbjbjekeeoijgddnmkonc\ [2014-02-03]
S2 24c54e38; "C:\Windows\system32\rundll32.exe" "c:\Program Files\DeltaFix\DeltaFix.dll",serv ==== ATTENTION
S3 rpcapd; "%ProgramFiles%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini" [X]
R3 AsrOcDrv; \\C:\Windows\system32\Drivers\AsrOcDrv.sys [X]
S3 taphss6; \SystemRoot\system32\DRIVERS\taphss6.sys [X]
2014-12-20 16:50 - 2014-12-20 16:57 - 00000000 ____ D () C:\AdwCleaner
2014-12-13 21:24 - 2014-12-13 21:24 - 00000000 ____ D () C:\Program Files\YYoutubEAdBlocke
2014-12-13 21:24 - 2014-12-13 21:24 - 00000000 ____ D () C:\Program Files\BuyNeSaave
2014-12-13 21:23 - 2014-12-13 21:23 - 00000000 ____ D () C:\ProgramData\ckmiblianodgbjbjekeeoijgddnmkonc
EmptyTemp:
Plik zapisz pod nazwą fixlist.txt i umieść obok FRST w tym samym folderze.