Problem z ace race

Dla specjalistów Bezpieczeństwo
#1

Witam

Mam problem z ace race, proszę o jakaś pomoc.

Wklejam raport FRST:

http://www.wklej.org/id/1657456/

Addition:

http://www.wklej.org/id/1657472/

#2

Otwórz notatnik systemowy i wklej:

Task: {0398F1A0-E986-44C5-8D49-E5D2F21E018C} - System32\Tasks\ASUS InstallAll ReInst = C:\Users\Loczek\AppData\Local\Temp\\InstallAll\ReInst.exe [2009-03-11] () ==== ATTENTION
Task: {3775B7B6-624B-423D-A35E-C89E139885BA} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-423048717-867958570-2534903354-1001Core = C:\Users\Loczek\AppData\Local\Facebook\Update\FacebookUpdate.exe [2014-10-10] (Facebook Inc.)
Task: {4497917E-9607-4D1A-B8CB-B6D1CE9277FB} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-423048717-867958570-2534903354-1001UA = C:\Users\Loczek\AppData\Local\Facebook\Update\FacebookUpdate.exe [2014-10-10] (Facebook Inc.)
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-423048717-867958570-2534903354-1001Core.job = C:\Users\Loczek\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-423048717-867958570-2534903354-1001UA.job = C:\Users\Loczek\AppData\Local\Facebook\Update\FacebookUpdate.exe
HKU\S-1-5-21-423048717-867958570-2534903354-1001\...\Run: [Facebook Update] = C:\Users\Loczek\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2014-10-10] (Facebook Inc.)
GroupPolicy: Group Policy on Chrome detected ======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction ======= ATTENTION
SearchScopes: HKU\.DEFAULT - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
CHR StartupUrls: Default - "hxxp://metromsn.pl/?pc=UP21ocid=UP21DHPdt=123112", "hxxp://isearch.omiga-plus.com/?type=hpts=1421942619from=coruid=WDCXWD7500BPVT-80HXZT1_WD-WXB1A51U0143U0143", "hxxp://isearch.omiga-plus.com/?type=hpppts=1421942672from=coruid=WDCXWD7500BPVT-80HXZT1_WD-WXB1A51U0143U0143"
CHR Extension: (ace race) - C:\Users\Loczek\AppData\Local\Google\Chrome\User Data\Default\Extensions\bficpjjidlppjkpfbeljidlpkjcajhbg [2015-01-23]
2015-03-08 12:45 - 2015-03-08 12:45 - 03109248 _____ (Enigma Software Group USA, LLC.) C:\Users\Loczek\Downloads\SpyHunter-Installer (2).exe
2015-03-08 12:45 - 2015-03-08 12:45 - 03109248 _____ (Enigma Software Group USA, LLC.) C:\Users\Loczek\Downloads\SpyHunter-Installer (1).exe
2015-03-08 12:44 - 2015-03-08 12:45 - 03109248 _____ (Enigma Software Group USA, LLC.) C:\Users\Loczek\Downloads\SpyHunter-Installer.exe
2015-02-23 21:38 - 2015-02-23 21:38 - 00003048 _____ () C:\Windows\System32\Tasks\{68F29A2E-A001-4E09-A589-648FF8457EBE}
2015-03-08 15:59 - 2015-01-23 22:38 - 00000000 ____ D () C:\AdwCleaner
EmptyTemp:

Plik zapisz pod nazwą fixlist.txt i umieść obok FRST w tym samym folderze.

#3

wielkie dzięki za pomoc

#4

Skasuj folder C:\FRST