Pojawiające sie reklamy skany olt

lech13133 · 10 Czerwiec 2014 10:58

Witam mam problem jak wielu z tego co tu widzę oto skany olt. Z góry dzięki za pomoc

OTL: http://www.wklej.org/id/1388029/

Extras: http://www.wklej.org/id/1388030/

Atis · 10 Czerwiec 2014 14:16

W panelu sterowania odinstaluj Mega Browse i MyPC Backup.

Pobierz i uruchom AdwCleaner Kliknij Szukaj i później Usuń.

Pobierz Farbar Recovery Scan Tool 64-Bit Version

Uruchom FRST i kliknij Scan. Pokaż raport FRST i Addition.

lech13133 · 10 Czerwiec 2014 16:25

FRST: http://www.wklej.org/id/1388350/

Addition: http://www.wklej.org/id/1388351/

Atis · 10 Czerwiec 2014 18:35

Masz pokazać dwa raporty z FRST.

lech13133 · 10 Czerwiec 2014 18:44

FRST: http://www.wklej.org/id/1388564/ przepraszam przez pomyłkę wkleiłem z adw.

Atis · 10 Czerwiec 2014 18:55

Wklej do systemowego notatnika i zapisz jako plik tekstowy o nazwie fixlist :

Startup: C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\trz3.tmp ()
Startup: C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\trz95EF.tmp ()
Startup: C:\Users\michał\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\trz37B1.tmp ()
GroupPolicyUsers\S-1-5-21-2489078383-1156454016-1883887050-1004\User: Group Policy restriction detected <======= ATTENTION
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.filesonic.com/referral/44698
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKCU - ŰźĆîZ§’2ąŢpv¨IÍá*X(Ž2s(ŰÎŔJşÔÓµť± vË°!×—(äĽ48Đ¸patm6ęo^Mp`Ëő÷_iŁwľ!„Áű†x˘8€ŮjŔ˙ţ ´Ń;áa´[¦†8 ş~ŹRŮxśňÜ8'Ł-)xä URL = 
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No File
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - No File
 R1 {29b136c9-938d-4d3d-8df8-d649d9b74d02}w64; C:\Windows\System32\drivers\{29b136c9-938d-4d3d-8df8-d649d9b74d02}w64.sys [60704 2014-05-20] (StdLib)
S3 DUMeterDrv; \??\C:\Program Files (x86)\DU Meter\DUMETR64.SYS [X]
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]
S3 PCANDIS4_RETWIFI; \??\C:\PROGRA~2\EEYEDI~1\RETINA~1\PCANDIS4_RETWIFI.SYS [X]
C:\Windows\system32\Drivers\{29b136c9-938d-4d3d-8df8-d649d9b74d02}w64.sys
C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.tmp
C:\found.000
C:\AdwCleaner
C:\Users\admin\AppData\Local\Temp\*.exe
C:\Users\admin\AppData\Local\Temp\*.vbs
Task: {09D79765-5240-4B44-940A-50862A47FC09} - System32\Tasks\{389CD541-8E82-475F-977C-CD1916532581} => Iexplore.exe http://ui.skype.com/ui/0/6.3.0.105/en/abandoninstall?page=tsMain
Task: {58F7F2CC-14D9-4D6C-88BA-287A871799A7} - System32\Tasks\{55F8A373-3C9C-456C-A587-29530FA40836} => I:\poborowka\Firefox Setup 3.6.13.exe [2011-02-16] (Mozilla)
Task: {6A144BBA-F4CC-4541-B68D-A75B9762DF74} - System32\Tasks\0 => Iexplore.exe <==== ATTENTION
Task: {6B549DF0-0B35-4586-90A1-0AE991AF33D8} - System32\Tasks\{B28BC5DE-7632-40BB-B115-C8587CC09B80} => Iexplore.exe http://ui.skype.com/ui/0/6.3.0.105/en/abandoninstall?page=tsMain
Task: {7D48C154-1378-4981-B123-AA11AAF45896} - System32\Tasks\4702 => Wscript.exe C:\Users\admin\AppData\Local\Temp\launchie.vbs //B <==== ATTENTION
Task: {7D7F8887-10B5-4199-81C1-7EE18253C114} - System32\Tasks\{E3DBF0B6-1F70-4DF9-9314-2858598EEA8B} => Iexplore.exe http://ui.skype.com/ui/0/6.3.0.107/pl/abandoninstall?page=tsMain
Task: {84595E0D-81A9-4C75-AF76-8459084A6E9E} - System32\Tasks\{E6379B72-65A3-4D43-BE09-0E809111F77C} => H:\hooligans\Hooligans.exe [2002-06-10] (the XIIIth productions bv)
Task: {92E332AC-E0E2-4EF0-8A45-43C9AB77A6FB} - \Desk 365 RunAsStdUser No Task File <==== ATTENTION
Task: {C028D2E6-8E1B-4BB1-81C7-0510DC850559} - System32\Tasks\{884B0787-9790-4B32-9021-47CC73C2B80D} => Iexplore.exe http://ui.skype.com/ui/0/6.2.0.106/en/abandoninstall?page=tsMain
Task: {F8F689B2-9E58-4741-88B7-15A60EB4A111} - System32\Tasks\ROC_JAN2013_TB_rmv => C:\Program Files (x86)\AVG Secure Search\PostInstall\ROC.exe
Task: C:\Windows\Tasks\ROC_JAN2013_TB_rmv.job => C:\Program Files (x86)\AVG Secure Search\PostInstall\ROC.exe
AlternateDataStreams: C:\Windows\System32:{4B9A1497-0817-47C4-9612-D6A1C53ACF57}

Uruchom FRST i kliknij Fix. Pokaż raport z usuwania Fixlog.

Kliknij Scan i pokaż nowy raport z FRST bez Addition.