Witam
Proszę o pomoc z uciążliwą ‘‘reklamą’’ wyświetlającą się w operze; w żaden znany mi sposób nie mogę jej usunąć, uniemożliwia korzystanie z przeglądarki
wklejam logi z OTL
OTL.txt http://www.wklej.org/id/1703058/
Extras.txt http://www.wklej.org/id/1703052/
FRST.txt http://www.wklej.org/id/1703490/
Addition.txt http://www.wklej.org/id/1703498/
Shortcut.txt http://www.wklej.org/id/1703502/
Usuń szkodliwe rozszerzenie. W pasek adresu wpisz: opera:extensions
Wklej do systemowego notatnika i zapisz jako plik tekstowy o nazwie fixlist :
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN">web/?type=dspp&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://www.<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN">web/?type=dspp&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN">web/?type=dspp&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN">web/?type=dspp&q={searchTerms}
SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN">web/?type=dspp&q={searchTerms}
SearchScopes: HKLM-x32 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN">web/?type=dspp&q={searchTerms}
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-609716757-2478412389-3047435355-1002 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL =
SearchScopes: HKU\S-1-5-21-609716757-2478412389-3047435355-1002 -> {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL =
Toolbar: HKU\S-1-5-21-609716757-2478412389-3047435355-1002 -> No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No File
CHR HomePage: Default -> hxxp://www.\u003C!DOCTYPE html PUBLIC \
CHR StartupUrls: Default -> "hxxp://www.\u003C!DOCTYPE html PUBLIC \"-//W3C//DTD HTML 4.01//EN\">?type=hppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppp"
CHR Extension: (Bookmark Manager) - C:\Users\Lalu\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmlllbghnfkpflemihljekbapjopfjik [2015-05-03]
OPR Extension: (browse pulse) - C:\Users\Lalu\AppData\Roaming\Opera Software\Opera Stable\Extensions\nkilnkgeaijhbgneifgocolopjgjkfpi [2015-05-01]
S3 ADSMService; C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMSrv.exe [X]
S3 AvastVBoxSvc; "D:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe" [X]
S2 SpyHunter 4 Service; C:\Program Files\Enigma Software Group\SpyHunter\SH4Service.exe [X]
S3 CLVirtualBus01; system32\DRIVERS\CLVirtualBus01.sys [X]
S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [X]
U3 tmlwf; No ImagePath
U3 tmwfp; No ImagePath
S2 VBoxAswDrv; \??\D:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [X]
2015-05-03 14:30 - 2015-05-03 14:57 - 00000000 ____ D () C:\AdwCleaner
2015-05-02 17:28 - 2015-05-02 17:28 - 00003320 _____ () C:\Windows\System32\Tasks\SpyHunter4Startup
2015-05-02 17:28 - 2015-05-02 17:28 - 00000000 ____ D () C:\Users\Lalu\AppData\Roaming\Enigma Software Group
2015-05-02 17:27 - 2015-05-02 17:28 - 00000000 ____ D () C:\Users\Lalu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SpyHunter
2015-05-02 17:27 - 2015-05-02 17:27 - 00000000 ____ D () C:\sh4ldr
2015-05-02 17:26 - 2015-05-02 17:26 - 00022704 _____ () C:\Windows\system32\Drivers\EsgScanner.sys
2015-05-02 17:20 - 2015-05-02 17:20 - 03109248 _____ (Enigma Software Group USA, LLC.) C:\Users\Lalu\Downloads\SpyHunter-Installer.exe
2015-04-26 19:51 - 2015-04-26 19:52 - 00741672 _____ (Web software ) C:\Users\Lalu\Downloads\PDFill-PDF-Tools-Free(25188)-dp.exe
2015-03-21 23:53 - 2015-03-21 23:53 - 184702896 _____ () C:\Users\Lalu\AppData\Local\ACCCx2_9_1_474.zip.aamdownload
2015-03-21 23:53 - 2015-03-21 23:53 - 0002216 _____ () C:\Users\Lalu\AppData\Local\ACCCx2_9_1_474.zip.aamdownload.aamd
2010-10-25 17:19 - 2010-10-25 17:20 - 0000105 _____ () C:\ProgramData\{40BF1E83-20EB-11D8-97C5-0009C5020658}.log
2010-10-25 17:19 - 2010-10-25 17:19 - 0000107 _____ () C:\ProgramData\{C59C179C-668D-49A9-B6EA-0121CCFC1243}.log
EmptyTemp:
Uruchom FRST i kliknij Fix. Pokaż raport z usuwania Fixlog.
Kliknij Scan i pokaż nowy raport z FRST bez Addition i Shortcut.