Problem z hold page ads

Dla specjalistów Bezpieczeństwo
#1

Witam,

mam problem z hold page ads, oraz komputer mi trochę muli. Ma ktoś na to jakąś radę ? 

 

http://www.wklej.org/id/1556013/    OTL

 

http://www.wklej.org/id/1556015/    Extras

 

http://www.wklej.org/id/1556040/    FRST

 

http://www.wklej.org/id/1556041/    Addition

 

Z góry dziękuję za pomoc i pozdrawiam :slight_smile:

#2

Otwórz Notatnik i wklej:

Task: {C8C8F9DE-A038-40BC-A273-3EF5DBC0F08B} - System32\Tasks\SpyHunter4Startup = C:\Program Files\Enigma Software Group\SpyHunter\Spyhunter4.exe [2014-12-12] (Enigma Software Group USA, LLC.)
HKLM-x32\...\Run: [] = [X]
GroupPolicy: Group Policy on Chrome detected ======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction ======= ATTENTION
SearchScopes: HKU\.DEFAULT - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-1931503491-4057135073-3578690288-1001 - DefaultScope {79DADC6C-CB83-47FA-87D2-D91909C357F2} URL =
SearchScopes: HKU\S-1-5-21-1931503491-4057135073-3578690288-1001 - {79DADC6C-CB83-47FA-87D2-D91909C357F2} URL =
BHO: No Name - {42435041-332D-5637-00A7-7A786E7484D7} - No File
Toolbar: HKU\S-1-5-21-1931503491-4057135073-3578690288-1001 - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll No File
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.115\npGoogleUpdate3.dll No File
CHR Extension: (Hold Page) - C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\edaikkjcipbnkplpaecabmeggakeeihg [2014-12-07]
R2 SpyHunter 4 Service; C:\Program Files\Enigma Software Group\SpyHunter\SH4Service.exe [1025920 2014-12-12] (Enigma Software Group USA, LLC.)
R3 esgiguard; C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [15920 2014-12-12] (Enigma Software Group USA, LLC.)
S3 EsgScanner; C:\Windows\System32\DRIVERS\EsgScanner.sys [22704 2014-12-12] ()
S3 IntcAzAudAddService; \SystemRoot\system32\drivers\RTKVHD64.sys [X]
2014-12-12 19:12 - 2014-12-12 19:19 - 00000000 ___DC () C:\AdwCleaner
2014-12-02 21:23 - 2014-12-12 18:49 - 00003324 _____ () C:\WINDOWS\System32\Tasks\SpyHunter4Startup
2014-12-02 21:23 - 2014-12-02 21:23 - 00000000 ____ D () C:\Users\admin\AppData\Roaming\Enigma Software Group
2014-12-02 21:22 - 2014-12-02 21:23 - 00000000 ___DC () C:\sh4ldr
2014-12-02 21:15 - 2014-12-12 18:47 - 00000000 ____ D () C:\Program Files\Enigma Software Group
2014-12-02 21:14 - 2014-12-02 21:15 - 02998656 _____ (Enigma Software Group USA, LLC.) C:\Users\admin\Downloads\SpyHunter-Installer.exe
EmptyTemp:

Plik zapisz pod nazwą fixlist.txt i umieść obok FRST w tym samym folderze.