Witam , mam problem z wyskakującymi reklamami w odnosnikach w przeglądarkach internetowych , zrobiło mi się to wczoraj. Próbowalem usunac to programem ADWCleaner ale nic to nie dało.
Logi:
OTL: http://www.wklej.org/id/1541331/
ADDition: http://www.wklej.org/id/1541334/
FRST: http://www.wklej.org/id/1541336/
Odinstaluj Spybot - Search & Destroy.Otwórz Notatnik i wklej:
Task: {49D0A575-3E8B-4587-9F59-FA765B7E9995} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization = C:\Program Files (x86)\Spybot - Search amp; Destroy 2\SDImmunize.exe
Task: {54D52E60-6FFE-4ABE-AAE7-57FC1C78030A} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates = C:\Program Files (x86)\Spybot - Search amp; Destroy 2\SDUpdate.exe
Task: {9666AA1A-8176-463D-83CB-3F78478C7F41} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system = C:\Program Files (x86)\Spybot - Search amp; Destroy 2\SDScan.exe
HKLM-x32\...\Run: [mbot_pl_122] = [X]
HKLM-x32\...\Run: [SDTray] = C:\Program Files (x86)\Spybot - Search Destroy 2\SDTray.exe [4101576 2014-06-24] (Safer-Networking Ltd.)
Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X]
HKU\S-1-5-21-1205994600-1588484832-2788265346-1000\...\MountPoints2: {9cf9f421-2743-11e4-aa5c-806e6f6e6963} - F:\ctrun\start.exe
ShellIconOverlayIdentifiers: GDriveSharedOverlay - {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43} = No File
BootExecute: autocheck autochk * sdnclean64.exe
StartMenuInternet: IEXPLORE.EXE - iexplore.exe
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL =
SearchScopes: HKLM-x32 - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL =
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\mystartsearch.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\webssearches.xml
FF Extension: No Name - C:\Users\Arek\AppData\Roaming\Mozilla\Firefox\Profiles\tk6zwrcb.default\Extensions\staged [2014-11-28]
FF Extension: BrowseStudio 1.0.1 - C:\Users\Arek\AppData\Roaming\Mozilla\Firefox\Profiles\tk6zwrcb.default\Extensions\{b4a69fee-d6ff-4bda-bdd9-f5dbbe57aa69}.xpi [2014-11-27]
FF Extension: Click Caption - C:\Program Files (x86)\Mozilla Firefox\extensions\{190bc294-c8e5-471c-9466-3eb945b09542} [2014-11-27]
CHR DefaultSearchKeyword: Default - istartsurf
CHR DefaultSearchProvider: Default - istartsurf
CHR DefaultSearchURL: Default - http://www.istartsurf.com/web/?type=dsts=1408394321from=smtuid=WDCXWD10EZEX-00BN5A0_WD-WCC3FJ9M8F2XM8F2Xq={searchTerms}
CHR Extension: (No Name) - C:\Users\Arek\AppData\Local\Google\Chrome\User Data\Default\Extensions\hiofaalopajjjhciacabgmjbajamoooh [2014-11-27]
R2 SDScannerService; C:\Program Files (x86)\Spybot - Search Destroy 2\SDFSSvc.exe [1738168 2014-06-24] (Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search Destroy 2\SDUpdSvc.exe [2088408 2014-06-27] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files (x86)\Spybot - Search Destroy 2\SDWSCSvc.exe [171928 2014-04-25] (Safer-Networking Ltd.)
S2 51cdb72; "C:\Windows\system32\rundll32.exe" "c:\Program Files (x86)\Optimizer Pro 3.11\OptProCrash.dll",ENT
R2 webinstrH; C:\Windows\system32\Drivers\webinstrH.sys [64232 2014-11-27] (Corsica)
2014-11-27 22:33 - 2014-11-27 23:00 - 00000000 ____ D () C:\ProgramData\Spybot - Search Destroy
2014-11-27 22:33 - 2014-11-27 22:35 - 00000000 ____ D () C:\Program Files (x86)\Spybot - Search Destroy 2
2014-11-27 22:33 - 2014-11-27 22:33 - 00001395 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot-SD Start Center.lnk
2014-11-27 22:33 - 2014-11-27 22:33 - 00001383 _____ () C:\Users\Public\Desktop\Spybot-SD Start Center.lnk
2014-11-27 22:33 - 2014-11-27 22:33 - 00000000 ____ D () C:\Windows\System32\Tasks\Safer-Networking
2014-11-27 22:33 - 2014-11-27 22:33 - 00000000 ____ D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search Destroy 2
2014-11-27 22:33 - 2013-09-20 10:49 - 00021040 _____ (Safer Networking Limited) C:\Windows\system32\sdnclean64.exe
2014-11-27 21:45 - 2014-11-28 13:15 - 00000000 ____ D () C:\AdwCleaner
2014-11-27 21:35 - 2014-11-27 21:35 - 00003158 _____ () C:\Windows\System32\Tasks\{EED37ABC-F126-46FF-9F27-99E4EDB7FD4E}
EmptyTemp:
Plik zapisz pod nazwą fixlist.txt i umieść obok FRST w tym samym folderze.
Dzięki , już nie mam “reklam” 