FRST http://www.wklej.org/id/1776390/
ADDITION http://www.wklej.org/id/1776391/
shortcut http://www.wklej.org/id/1776393/
dziekuje, K.
Otwórz notatnik systemowy i wklej:
GroupPolicy: Group Policy on Chrome detected ======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction ======= ATTENTION
URLSearchHook: [S-1-5-21-2747920576-3372987966-852615046-1001] ATTENTION = Default URLSearchHook is missing
SearchScopes: HKU\S-1-5-21-2747920576-3372987966-852615046-1002 - {986F1303-5C69-4B31-88E6-F04D7A291054} URL = hxxp://rts.dsrlte.com/?affID=naq={searchTerms}r=107
BHO-x32: Sale Charger - {7a38e53c-e000-41e4-9b5a-47447db81c2b} - C:\Program Files (x86)\Sale Charger\Extensions\7a38e53c-e000-41e4-9b5a-47447db81c2b.dll No File
FF DefaultSearchEngine: do-search
FF SearchPlugin: C:\Users\Kate\AppData\Roaming\Mozilla\Firefox\Profiles\gpq4gcwn.default-1411755915599\searchplugins\do-search.xml [2015-05-11]
FF SearchPlugin: C:\Users\Kate\AppData\Roaming\Mozilla\Firefox\Profiles\gpq4gcwn.default-1411755915599\searchplugins\search-simple.xml [2015-03-20]
FF Extension: Sale Charger - C:\Users\Kate\AppData\Roaming\Mozilla\Firefox\Profiles\gpq4gcwn.default-1411755915599\Extensions\{2300a61e-a619-4b24-a7c8-e9c3c5310d5c}.xpi [2015-05-11]
CHR HKU\S-1-5-21-2747920576-3372987966-852615046-1002\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [ahgdclgdhfeingghldkedleghekbfhef] - https://clients2.google.com/service/update2/crx
S3 MBAMSwissArmy; \\C:\Windows\system32\drivers\MBAMSwissArmy.sys [X]
S3 SmbDrvI; \SystemRoot\system32\DRIVERS\Smb_driver_Intel.sys [X]
EmptyTemp:
Plik zapisz pod nazwą fixlist.txt i umieść obok FRST w tym samym folderze.