Tym razem żona podłapała na komputerze, proszę o pomoc.
AdwCleaner: http://wklejto.pl/223181
FRST: http://www.wklejto.pl/223182
Addition: http://www.wklejto.pl/223183
Shortcut: http://www.wklejto.pl/223184
Z góry dzięki!
Otwórz notatnik systemowy i wklej:
Hosts:
HKLM\...\Run: [RTHDVCPL] = C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7192792 2013-07-06] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] = C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1321688 2013-07-05] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_PushButton] = C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1321688 2013-07-05] (Realtek Semiconductor)
GroupPolicy: Group Policy on Chrome detected ======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction ======= ATTENTION
SearchScopes: HKU\.DEFAULT - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
CHR HomePage: Default - hxxp://isearch.omiga-plus.com/?type=hpts=1422999666from=coruid=LITEONITXLMT-128M6MXmSATAX128GB_TW0T8MRJ550853AI5263
CHR StartupUrls: Default - "hxxp://isearch.omiga-plus.com/?type=hpts=1422999666from=coruid=LITEONITXLMT-128M6MXmSATAX128GB_TW0T8MRJ550853AI5263"
CHR DefaultSearchKeyword: Default - omiga-plus
CHR Extension: (Round World) - C:\Users\Domi-Nika\AppData\Local\Google\Chrome\User Data\Default\Extensions\egkpojibogaemajbehmhdkfadcjmnnae [2015-02-04]
R2 MaintainerSvc2.14.9041534; C:\ProgramData\aea8cc93-2213-47cf-a265-0391e3461dbb\maintainer.exe [123632 2015-03-03] ()
2015-03-03 11:59 - 2015-03-03 12:10 - 00000000 ____ D () C:\AdwCleaner
EmptyTemp:
Plik zapisz pod nazwą fixlist.txt i umieść obok FRST w tym samym folderze.