Problem z usunięciem ib,adnxs

Mercual · 5 Luty 2015 19:20

Witam mam problem z usunięciem ib,adnxs, mam ściągniętego FRST.

Z góry dziękuję za pomoc

krzych5610 · 5 Luty 2015 20:49

Wklej do notatnika i zapisz jako fixlist:

() C:\ProgramData\0c3a7392-abfa-41f5-95a9-5e339ac76b7b\maintainer.exe HKLM…\Run: [ApnTBMon] => C:\Program Files\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe [1938840 2015-01-15] (APN) GroupPolicy: Group Policy on Chrome detected <======= ATTENTION CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION HKU\S-1-5-21-2679091665-2526321839-1035807104-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://istart.webssearches.com/?type=hp&ts=1413395662&from=wpc&uid=HTS541080G9SA00_MPBDPAXNHSJ4HGHSJ4HGX SearchScopes: HKLM -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://istart.webssearches.com/web/?type=ds&ts=1413395662&from=wpc&uid=HTS541080G9SA00_MPBDPAXNHSJ4HGHSJ4HGX&q={searchTerms} SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://istart.webssearches.com/web/?type=ds&ts=1413395662&from=wpc&uid=HTS541080G9SA00_MPBDPAXNHSJ4HGHSJ4HGX&q={searchTerms} BHO: Search App by Ask -> {5350432D-5350-006A-76A7-7A786E7484D7} -> C:\Program Files\AskPartnerNetwork\Toolbar\SPC-SP\Passport.dll (APN LLC.) Toolbar: HKLM - Search App by Ask - {5350432D-5350-006A-76A7-7A786E7484D7} - C:\Program Files\AskPartnerNetwork\Toolbar\SPC-SP\Passport.dll (APN LLC.) Toolbar: HKU\S-1-5-21-2679091665-2526321839-1035807104-1000 -> Search App by Ask - {5350432D-5350-006A-76A7-7A786E7484D7} - C:\Program Files\AskPartnerNetwork\Toolbar\SPC-SP\Passport.dll (APN LLC.) FF Homepage: hxxp://istart.webssearches.com/?type=hp&ts=1413395662&from=wpc&uid=HTS541080G9SA00_MPBDPAXNHSJ4HGHSJ4HGX FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll No File FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll No File FF Extension: Clock Hand 1.0.1 - C:\Users\Adam\AppData\Roaming\Mozilla\Firefox\Profiles\e87bvrp6.default\Extensions{cb70d938-64a3-429a-9de7-76efb8483eb3}.xpi [2015-02-04] CHR dev: Chrome dev build detected! <======= ATTENTION CHR DefaultSearchKeyword: Default -> B086B9EDFC7684F04D81E214A6EE63073F3C199EF4E30F73DAC12434CD73E4C3 CHR DefaultSearchURL: Default -> 200BB54A4B2AAEBE3591AAC8EF01430ED2A28A3186CCD2DF3CC3BF5D191ACBCC CHR Extension: (Ask Search) - C:\Users\Adam\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaadgepjkdffhjbkfjgnnffnfcffbg [2014-10-25] CHR Extension: (Clock Hand) - C:\Users\Adam\AppData\Local\Google\Chrome\User Data\Default\Extensions\jepfebhiclafajkaljahgjgidpkbhflk [2015-02-05] StartMenuInternet: Google Chrome - C:\Program Files\Google\Chrome\Application\chrome.exe http://istart.webssearches.com/?type=sc&ts=1413395662&from=wpc&uid=HTS541080G9SA00_MPBDPAXNHSJ4HGHSJ4HGX S2 gupdate; “C:\Program Files\Google\Update\GoogleUpdate.exe” /svc [X] S3 gupdatem; “C:\Program Files\Google\Update\GoogleUpdate.exe” /medsvc [X] R1 {cb70d938-64a3-429a-9de7-76efb8483eb3}Gt; C:\Windows\System32\drivers{cb70d938-64a3-429a-9de7-76efb8483eb3}Gt.sys [55824 2015-02-03] (StdLib) S4 blbdrive; \SystemRoot\system32\drivers\blbdrive.sys [X] S3 catchme; ??\C:\Users\Adam\AppData\Local\Temp\catchme.sys [X] S3 d553bus; system32\DRIVERS\d553bus.sys [X] S3 d553card; system32\DRIVERS\d553card.sys [X] S3 d553mdfl; system32\DRIVERS\d553mdfl.sys [X] S3 d553mdfl2; system32\DRIVERS\d553mdfl2.sys [X] S3 d553mdm; system32\DRIVERS\d553mdm.sys [X] S3 d553mdm2; system32\DRIVERS\d553mdm2.sys [X] S3 d553nd5; system32\DRIVERS\d553nd5.sys [X] S3 d553scard; system32\DRIVERS\d553scard.sys [X] S3 d553unic; system32\DRIVERS\d553unic.sys [X] S3 IpInIp; system32\DRIVERS\ipinip.sys [X] S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [X] S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [X] 2015-02-04 10:45 - 2015-02-05 15:17 - 00000000 ____D () C:\ProgramData\0c3a7392-abfa-41f5-95a9-5e339ac76b7b 2015-02-04 08:17 - 2015-02-03 21:14 - 00055824 _____ (StdLib) C:\Windows\system32\Drivers{cb70d938-64a3-429a-9de7-76efb8483eb3}Gt.sys 2015-02-05 18:36 - 2006-11-02 14:01 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2015-02-05 18:02 - 2013-08-30 08:32 - 00535568 _____ () C:\Windows\system32\perfh015.dat 2015-02-05 18:02 - 2013-08-30 08:32 - 00086416 _____ () C:\Windows\system32\perfc015.dat Clock Hand (HKLM…\Clock Hand) (Version: 2015.02.04.052431 - Clock Hand) <==== ATTENTION Search App by Ask (HKLM…{5350432D-5350-006A-76A7-A758B70C1800}) (Version: 12.24.0.209 - APN, LLC) <==== ATTENTION Task: {6C9979EA-D258-4F28-8F28-520C23043B2B} - System32\Tasks\LaunchSignup => C:\Program Files\MyPC Backup\Signup Wizard.exe <==== ATTENTION Task: {A64FEC0A-089E-4129-9311-FBFD8DC84C0F} - System32\Tasks{49C77CAC-8B94-4444-B64A-AD1735BC0F84} => pcalua.exe -a C:\TEMP\GTAINSTALLER\SETUP.EXE -d C:\TEMP\GTAINSTALLER 2015-02-04 13:28 - 2015-02-05 15:17 - 00123632 _____ () C:\ProgramData\0c3a7392-abfa-41f5-95a9-5e339ac76b7b\maintainer.exe EmptyTemp: Umieść obok skanera FRST. Uruchom skaner i wykonaj polecenie FIX. Pokaż raport Fixlog. Pobierz na pulpit Adwcleaner - https://toolslib.net/downloads/viewdownload/1-adwcleaner/ Po uruchomieniu wykonaj polecenia szukaj i usuń. Uruchom ponownie FRST i pokaż aktualne raporty.

Mercual · 6 Luty 2015 06:45

Aktualne raporty:

advcleaner: http://wklej.org/id/1626197/

fixlog: http://wklej.org/id/1626198/

FRST: http://wklej.org/id/1626200/

additional: http://wklej.org/id/1626201/

krzych5610 · 6 Luty 2015 07:58

Wklej do notatnika i zapisz jako fixlist:

CloseProcesses: CreateRestorePoint: GroupPolicy: Group Policy on Chrome detected <======= ATTENTION CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION SearchScopes: HKU.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = CHR dev: Chrome dev build detected! <======= ATTENTION CHR DefaultSearchKeyword: Default -> B086B9EDFC7684F04D81E214A6EE63073F3C199EF4E30F73DAC12434CD73E4C3 CHR DefaultSearchURL: Default -> 200BB54A4B2AAEBE3591AAC8EF01430ED2A28A3186CCD2DF3CC3BF5D191ACBCC S2 MaintainerSvc1.65.3138243; “C:\ProgramData\0c3a7392-abfa-41f5-95a9-5e339ac76b7b\maintainer.exe” [X] R1 {cb70d938-64a3-429a-9de7-76efb8483eb3}Gt; C:\Windows\System32\drivers{cb70d938-64a3-429a-9de7-76efb8483eb3}Gt.sys [55824 2015-02-05] (StdLib) 2015-02-06 07:31 - 2015-02-05 12:36 - 00055824 _____ (StdLib) C:\Windows\system32\Drivers{cb70d938-64a3-429a-9de7-76efb8483eb3}Gt.sys 2015-02-06 07:29 - 2015-02-06 07:32 - 00000000 ____D () C:\AdwCleaner C:\Users\Adam\AppData\Local\temp\sqlite3.dll Search App by Ask (HKLM…{5350432D-5350-006A-76A7-A758B70C1800}) (Version: 12.24.0.209 - APN, LLC) <==== ATTENTION EmptyTemp: Umieść obok skanera FRST. Uruchom skaner i wykonaj polecenie FIX. Po restarcie usuń raport Fixlog, raporty FRST, folder C:\FRST. Uruchom ponownie Adwcleaner i wykonaj polecenie odinstaluj.