Ponownie Surfvox


(Kuba25042001) #1

Witam! Niedawno pisałam o nijakim Surfvoxie, który znów postanowił zagościć. Jeszcze raz przepraszam za wszechobecny spam, ale nie potrafię zrobić fixlisty :confused: Dorzucam FRST oraz Addition. (Przepraszam, że nie są one w Wklejce)

Addition.txt

FRST.txt


(Acorus) #2

Otwórz notatnik systemowy i wklej:

CloseProcesses:
Task: {00C07D61-9F4F-45E9-892B-8299C00CF432} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> No File <==== ATTENTION
Task: {039E1D96-0E49-46D0-BAD5-4E55F5675842} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> No File <==== ATTENTION
Task: {09088B30-86ED-48CA-8B78-335F3966781E} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> No File <==== ATTENTION
Task: {14D7B608-8350-457E-9501-6BA5FC33C81F} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> No File <==== ATTENTION
Task: {5F60AD7F-835D-4EDD-99DB-D2BF6BEF4CF5} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> No File <==== ATTENTION
Task: {69B08A4A-9E2F-4EC0-BE27-D4C063E000E8} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> No File <==== ATTENTION
Task: {6A4356FB-31FF-4D13-80F9-6F73581C88D0} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> No File <==== ATTENTION
Task: {81B688C9-F77C-47AC-959B-EB3685984533} - \Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd -> No File <==== ATTENTION
Task: {8C6817C1-A409-4C4F-9BFD-14CD45255AE4} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> No File <==== ATTENTION
Task: {A525CD0C-2829-44A8-8BF8-C155B13E31CB} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> No File <==== ATTENTION
Task: {BF9E3391-57B7-45CC-9EEB-4A27E8E9CBA8} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> No File <==== ATTENTION
HKU\S-1-5-21-723567750-592749291-170806347-1001\...\Run: [nvxasync] => C:\Users\Kuba\AppData\Roaming\nvxasync\nvxasync.exe [153822720 2015-08-16] ()
HKU\S-1-5-21-723567750-592749291-170806347-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.surfvox.com/
S3 wfpcapture; \SystemRoot\System32\drivers\wfpcapture.sys [X]
2015-08-16 20:55 - 2015-08-16 20:55 - 00000000 _RSHD C:\ProgramData\nvxasync
2015-08-16 20:54 - 2015-08-16 20:55 - 00000000 _RSHD C:\Users\Kuba\AppData\Roaming\nvxasync
2015-08-16 20:54 - 2015-08-16 20:54 - 243361280 _____ C:\Users\Kuba\AppData\Roaming\Launcher.rb4
2015-08-16 20:54 - 2015-08-16 20:54 - 00000000 ____ D C:\Users\Kuba\AppData\Roaming\chportu
EmptyTemp:

Plik zapisz pod nazwą fixlist.txt i umieść obok FRST w tym samym folderze.