Po każdym kliknięciu REKLAMY! Jak skasować?

Dla specjalistów Bezpieczeństwo
#1

Witam mam od dłuższego czasu problem z reklamami… Po każdym kliknięciu wyskakują reklamy.

#2

Pobierz Farbar Recovery Scan Tool http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/ zgodny z wersją systemu 32-bit lub 64-bit.

#3

FRST http://wklej.org/id/1598159/

#4

Odinstaluj Akamai NetSession Interface.Otwórz notatnik systemowy i wklej:

Task: {0566DFF3-776B-4AE6-B402-DF6198C60B1B} - \Microsoft\Windows\Maintenance\SMupdate2 No Task File ==== ATTENTION
Task: {4B7745CE-DC40-4ADE-BD3F-E3633B7E1751} - \Microsoft\Windows\Multimedia\SMupdate3 No Task File ==== ATTENTION
Task: {77A84889-691F-4F4B-AB08-3A475E9A922A} - System32\Tasks\{C8F1AC24-18A7-449C-AEE8-FAF419A08365} = pcalua.exe -a C:\Users\Haunted\AppData\Roaming\mystartsearch\UninstallManager.exe -c -ptid=amt
GroupPolicy: Group Policy on Chrome detected ======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction ======= ATTENTION
SearchScopes: HKU\.DEFAULT - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
FF Extension: b8eb6570dd4911df937b0800200c9a66 - C:\Users\Haunted\AppData\Roaming\Mozilla\Firefox\Profiles\6e9bc3yr.default\Extensions\{b8eb6570-dd49-11df-937b-0800200c9a66} [2015-01-14]
S2 TBPanel; No ImagePath
S3 EagleX64; \\C:\Windows\system32\drivers\EagleX64.sys [X]
S3 NTIOLib_1_0_C; \\E:\NTIOLib_X64.sys [X]
S1 prodrv06; \SystemRoot\System32\drivers\prodrv06.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]
S3 X6va027; \\C:\Windows\SysWOW64\Drivers\X6va027 [X]
2015-01-15 22:48 - 2015-01-15 22:48 - 00003096 _____ () C:\Windows\System32\Tasks\{19B976A3-9C99-4CF2-881C-5B35042E32DF}
2015-01-15 22:30 - 2015-01-15 22:30 - 00005838 _____ () C:\Windows\system32\.crusader
2015-01-15 22:24 - 2015-01-15 22:30 - 00000000 ____ D () C:\ProgramData\HitmanPro
2015-01-15 22:14 - 2015-01-15 22:21 - 11225840 _____ (SurfRight B.V.) C:\Users\Haunted\Downloads\HitmanPro_x64.exe
2015-01-11 15:31 - 2015-01-11 15:31 - 00003162 _____ () C:\Windows\System32\Tasks\{C8F1AC24-18A7-449C-AEE8-FAF419A08365}
2015-01-02 21:28 - 2015-01-17 12:03 - 00000000 ____ D () C:\AdwCleaner
EmptyTemp:

Plik zapisz pod nazwą fixlist.txt i umieść obok FRST w tym samym folderze.

#5

Fixlog http://wklej.org/id/1598203/

#6

Jak wszystko gra to skasuj folder C:\FRST