Witam. Od dłuższego czasu staram się pozbyć “sweet-page” w przeglądarce mam wrażenie, że przez to mój laptop chodzi o wiele wolniej.
Wykonałem skany :
FRST : http://wklej.org/id/1803660/
ADDITION : http://wklej.org/id/1803661/
SHORTCUT : http://wklej.org/id/1803662/
Otwórz notatnik systemowy i wklej:
Task: {06C90332-8C66-4D2A-B560-3F1D4E336DC8} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig - Brak pliku ==== UWAGA
Task: {240AC069-3CEC-4F98-BB8F-4CF597E8BC69} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d - Brak pliku ==== UWAGA
Task: {32DD66D0-2921-4723-8471-312CE9105AFD} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d - Brak pliku ==== UWAGA
Task: {3E928163-5B27-4283-96F0-796DDD5A5AED} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent - Brak pliku ==== UWAGA
Task: {588F1C16-C6D1-4E61-9D14-DF5135911FEF} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B - Brak pliku ==== UWAGA
Task: {59B83716-CFA0-4B69-82CA-91BEFEAFA0D8} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d - Brak pliku ==== UWAGA
Task: {68F67887-73AB-47FC-AFCB-149886BE966E} - \Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd - Brak pliku ==== UWAGA
Task: {A0EF9939-4E34-401A-9A8B-38DE961B9803} - \Microsoft\Windows\Setup\gwx\launchtrayprocess - Brak pliku ==== UWAGA
Task: {B9F34E3A-F110-451D-867F-0032CDCE62F5} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent - Brak pliku ==== UWAGA
Task: {BE7CBA0C-B418-4AA0-9E31-EB87B1D0DE3D} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d - Brak pliku ==== UWAGA
Task: {E8C4CF39-6D62-47A2-A9DE-5EB1AF939578} - System32\Tasks\SpyHunter4Startup = C:\Program Files (x86)\Enigma Software Group\SpyHunter\Spyhunter4.exe [2015-09-18] (Enigma Software Group USA, LLC.)
Task: {EAC890FB-4588-4B30-82DA-661B7DF3945C} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d - Brak pliku ==== UWAGA
BootExecute: autocheck autochk * sdnclean64.exe
SearchScopes: HKU\S-1-5-21-4209436582-203274602-841192536-1002 - DefaultScope {E79A9DEF-AC71-4D0C-B71F-B080905FEEAD} URL =
SearchScopes: HKU\S-1-5-21-4209436582-203274602-841192536-1002 - {E79A9DEF-AC71-4D0C-B71F-B080905FEEAD} URL =
Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - Brak pliku
Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - Brak pliku
Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - Brak pliku
CHR HKLM\...\Chrome\Extension: [dbhjdbfgekjfcfkkfjjmlmojhbllhbho] - https://chrome.google.com/webstore/detail/dbhjdbfgekjfcfkkfjjmlmojhbllhbho
CHR HKLM\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - C:\Program Files (x86)\McAfee\SiteAdvisor\McChPlg.crx nie znaleziono
CHR HKLM-x32\...\Chrome\Extension: [dbhjdbfgekjfcfkkfjjmlmojhbllhbho] - https://chrome.google.com/webstore/detail/dbhjdbfgekjfcfkkfjjmlmojhbllhbho
CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - C:\Program Files (x86)\McAfee\SiteAdvisor\McChPlg.crx nie znaleziono
S2 mfemms; "C:\Program Files\Common Files\McAfee\SystemCore\\mfemms.exe" [X]
U4 klkbdflt2; \SystemRoot\system32\DRIVERS\klkbdflt2.sys [X]
S3 mfesapsn; \\C:\Program Files (x86)\McAfee\SiteAdvisor\x64\mfesapsn.sys [X]
S3 wfpcapture; \SystemRoot\System32\drivers\wfpcapture.sys [X]
2015-09-23 22:04 - 2015-09-23 22:10 - 00000000 ____ D C:\Program Files (x86)\Spybot - Search Destroy 2
2015-09-23 22:04 - 2015-09-23 22:08 - 00000000 ____ D C:\ProgramData\Spybot - Search Destroy
2015-09-23 22:04 - 2015-09-23 22:04 - 00000000 ____ D C:\WINDOWS\System32\Tasks\Safer-Networking
2015-09-23 22:01 - 2015-09-23 22:01 - 46525608 _____ (Safer-Networking Ltd. ) C:\Users\Tyszkoooo\Downloads\spybot-2.4.exe
2015-09-23 22:00 - 2015-09-23 22:01 - 00932440 _____ (Application ) C:\Users\Tyszkoooo\Downloads\Spybot-Search-Destroy-12546-dp (1).exe
2015-09-23 21:58 - 2015-09-23 22:01 - 00932440 _____ (Application ) C:\Users\Tyszkoooo\Downloads\Spybot-Search-Destroy-12546-dp.exe
2015-09-21 12:27 - 2015-09-23 22:09 - 00000000 ____ D C:\AdwCleaner
2015-09-18 23:01 - 2015-09-18 23:01 - 00003434 _____ C:\WINDOWS\System32\Tasks\SpyHunter4Startup
2015-09-18 23:01 - 2015-09-18 23:01 - 00002369 _____ C:\Users\Tyszkoooo\Desktop\SpyHunter.lnk
2015-09-18 23:01 - 2015-09-18 23:01 - 00000000 ____ D C:\Users\Tyszkoooo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SpyHunter
2015-09-18 23:01 - 2015-09-18 23:01 - 00000000 ____ D C:\sh4ldr
2015-09-18 23:01 - 2015-09-18 23:01 - 00000000 ____ D C:\Program Files (x86)\Enigma Software Group
2015-09-18 22:59 - 2015-09-18 23:01 - 00000000 ____ D C:\WINDOWS\AF54923662584AC6A0435B5B89C6EB61.TMP
2015-09-18 22:56 - 2015-09-18 22:58 - 00000000 ____ D C:\Users\Tyszkoooo\Downloads\spyhunter
2015-09-18 15:38 - 2015-09-18 15:38 - 00000000 _____ C:\autoexec.bat
2015-09-18 15:36 - 2015-09-18 15:37 - 03237248 _____ (Enigma Software Group USA, LLC.) C:\Users\Tyszkoooo\Downloads\SpyHunter-Installer.exe
C:\ProgramData\{262E20B8-6E20-4CEF-B1FD-D022AB1085F5}.dat
EmptyTemp:
Plik zapisz pod nazwą fixlist.txt i umieść obok FRST w tym samym folderze.