http://www.wklej.org/id/1509310/
http://www.wklej.org/id/1509311/
Odinstalowałem przez aplet “dodaj usuń programy”. niestety nic to nie dało.
Odinstaluj Adobe Download Assistant,MyBestOffersToday 008.86.Otwórz Notatnik i wklej:
Task: {38047EF1-F5BA-408D-A049-BBECB84844C2} - System32\Tasks\UNELEVATE_10024 = C:\Program Files\ShopperPro\JSDriver\1.37.0.1391\jsdrv.exe ==== ATTENTION
Task: {59053D32-2A9C-4795-8215-4DB209C9644A} - System32\Tasks\YTDownloaderUpd = C:\Program Files\YTDownloader\updater.exe ==== ATTENTION
HKLM\...\Run: [mbot_pl_86] = C:\Program Files\mbot_pl_86\mbot_pl_86.exe [3981256 2014-10-31] ()
HKLM\...\RunOnce: [upmbot_pl_86.exe] = C:\Users\Adam\AppData\Local\mbot_pl_86\upmbot_pl_86.exe [3340232 2014-10-31] ()
HKU\S-1-5-21-3432150366-4122893156-3566347746-1001\...\Run: [] = [X]
ShortcutTarget: EVGA PrecisionX 16 (2).lnk - C:\Windows\Installer\{E019FA6A-BA92-49A5-A4A6-FB7C60931643}\PrecisionX.exe11_06974D0D33644B2F8339468C2509156C.exe (No File)
Startup: C:\Users\Adam\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\EVGA PrecisionX 16.lnk
ShortcutTarget: EVGA PrecisionX 16.lnk - C:\Windows\Installer\{E019FA6A-BA92-49A5-A4A6-FB7C60931643}\PrecisionX.exe11_06974D0D33644B2F8339468C2509156C.exe (No File)
GroupPolicy: Group Policy on Chrome detected ======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction ======= ATTENTION
BHO: NextCoup - {3c2bd7e6-41b4-4cf6-a60e-8cb3084461e1} - C:\Program Files\NextCoup\NZ3wHE35D0EsyW.dll No File
FF DefaultSearchEngine: Yahoo!
FF SelectedSearchEngine: Yahoo!
FF Keyword.URL: hxxp://search.yahoo.com/search?fr=greentree_ff1ei=utf-8ilc=12type=541231p=
FF SearchPlugin: C:\Users\Adam\AppData\Roaming\Mozilla\Firefox\Profiles\vhx6v8ru.default-1386273604991\searchplugins\yahoo_ff.xml
FF Extension: No Name - C:\Users\gucio\AppData\Roaming\Mozilla\Firefox\Profiles\vhx6v8ru.default-1386273604991\extensions\{81BF1D23-5F17-408D-AC6B-BD6DF7CAF670} [Not Found]
FF Extension: No Name - C:\Users\gucio\AppData\Roaming\Mozilla\Firefox\Profiles\vhx6v8ru.default-1386273604991\extensions\WebSiteRecommendation@weliketheweb.com [Not Found]
FF Extension: No Name - C:\Users\Adam\AppData\Roaming\Mozilla\Firefox\Profiles\vhx6v8ru.default-1386273604991\extensions\a54e453c-130a-4769-9333-c5ec2aa914c5@9bd7cc89-9c7c-44e9-a03b-042b92d363f0.com [Not Found]
FF Extension: No Name - C:\Program Files\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} [Not Found]
CHR Extension: (GoSave) - C:\Users\Adam\AppData\Local\Google\Chrome\User Data\Default\Extensions\alinangbjeoniaindmnooeclgmcnabhb [2014-11-01]
S4 gupdate; "C:\Program Files\Google\Update\GoogleUpdate.exe" /svc [X]
S4 gupdatem; "C:\Program Files\Google\Update\GoogleUpdate.exe" /medsvc [X]
R3 AsrOcDrv; \\C:\Windows\system32\Drivers\AsrOcDrv.sys [X]
S3 cpuz137; \\C:\Users\Adam\AppData\Local\Temp\cpuz137\cpuz137_x32.sys [X]
S3 kxwdmdrv; \SystemRoot\system32\drivers\kx.sys [X]
S0 shwabd; System32\drivers\rplm.sys [X]
S2 SPDRIVER_1.37.0.1391; \\C:\Program Files\ShopperPro\JSDriver\1.37.0.1391\jsdrv.sys [X]
S0 thplw; System32\drivers\ougtfk.sys [X]
2014-11-04 13:03 - 2014-11-04 18:58 - 00000000 ____ D () C:\Users\Adam\AppData\Local\mbot_pl_86
2014-11-04 13:03 - 2014-11-04 13:03 - 00000000 ____ D () C:\Program Files\mbot_pl_86
2014-11-01 23:07 - 2014-11-01 23:07 - 00000000 ____ D () C:\Users\HomeGroupUser$\AppData\Local\Google
2014-11-01 23:07 - 2014-11-01 23:07 - 00000000 ____ D () C:\Users\HomeGroupUser$\AppData\Local\Comodo
2014-11-01 23:07 - 2014-11-01 23:07 - 00000000 ____ D () C:\Users\HomeGroupUser$
2014-11-01 23:07 - 2014-11-01 23:07 - 00000000 ____ D () C:\Users\Guest\AppData\Local\Google
2014-11-01 23:07 - 2014-11-01 23:07 - 00000000 ____ D () C:\Users\Guest\AppData\Local\Comodo
2014-11-01 23:07 - 2014-11-01 23:07 - 00000000 ____ D () C:\Users\Guest
2014-11-01 23:07 - 2014-11-01 23:07 - 00000000 ____ D () C:\Users\Administrator\AppData\Local\Google
2014-11-01 23:07 - 2014-11-01 23:07 - 00000000 ____ D () C:\Users\Administrator\AppData\Local\Comodo
2014-11-01 23:07 - 2014-11-01 23:07 - 00000000 ____ D () C:\Users\Administrator
2014-11-01 23:07 - 2014-11-01 23:07 - 00000000 ____ D () C:\Users\Adam\AppData\Local\Comodo
nointegritychecks: == Integrity Checks is disabled ===== ATTENTION!
EmptyTemp:
Plik zapisz pod nazwą fixlist.txt i umieść obok FRST w tym samym folderze.