Witam.
Mam problem z pozbyciem się wyskakujących okienek z reklamami Sale Charger Ads. Sam program usunąłem, ale reklamy w przeglądarkach nadal wyskakują. Ponadto Avast ciągle wyświetla alerty. Proszę o pomoc.
Wymagane raporty FRST http://forum.dobreprogramy.pl/farbar-recovery-scan-tool-raport-obowiązkowy-t478727/
Linki do raportów:
FRST http://www.wklej.org/id/1753639/
Addition http://www.wklej.org/id/1753648/
Shortcut http://www.wklej.org/id/1753651/
Pozdrawiam
Wklej do notatnika:
CloseProcesses:
ShellIconOverlayIdentifiers: [SkyDrive1] - {F241C880-6982-4CE5-8CF7-7085BA96DA5A} = No File
ShellIconOverlayIdentifiers: [SkyDrive2] - {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} = No File
ShellIconOverlayIdentifiers: [SkyDrive3] - {BBACC218-34EA-4666-9D7A-C78F2274A524} = No File
ShellIconOverlayIdentifiers-x32: [SkyDrive1] - {F241C880-6982-4CE5-8CF7-7085BA96DA5A} = No File
ShellIconOverlayIdentifiers-x32: [SkyDrive2] - {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} = No File
ShellIconOverlayIdentifiers-x32: [SkyDrive3] - {BBACC218-34EA-4666-9D7A-C78F2274A524} = No File
GroupPolicy: Group Policy on Chrome detected ======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction ======= ATTENTION
HKU\S-1-5-21-2860860314-3985624264-2187845631-1002\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.interia.pl/#utm_source=instalki1utm_medium=installerutm_campaign=instalki1iwa_source=installer_instalki
SearchScopes: HKU\.DEFAULT - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-2860860314-3985624264-2187845631-1002 - {szukaj.gazeta.pl} URL = http://szukaj.gazeta.pl/internet/0,0.html?slowo={searchTerms}
FF Extension: Sale Charger - C:\Users\Natalka\AppData\Roaming\Mozilla\Firefox\Profiles\a3ikmz97.default\Extensions\{63880cd8-b863-4288-8dca-48d12661d7dd}.xpi [2015-06-01]
CHR Extension: (Sale Charger) - C:\Users\Natalka\AppData\Local\Google\Chrome\User Data\Default\Extensions\npgfkibkmennbfadphcpjejdpfaeaenh [2015-05-22]
OPR Extension: (Sale Charger) - C:\Users\Natalka\AppData\Roaming\Opera Software\Opera Stable\Extensions\npgfkibkmennbfadphcpjejdpfaeaenh [2015-05-21]
U4 BthAvrcpTg; No ImagePath
U4 BthHFEnum; No ImagePath
U4 bthhfhid; No ImagePath
U0 msahci; No ImagePath
S1 tbfd_1_10_0_16; system32\drivers\tbfd_1_10_0_16.sys [X]
2015-07-08 00:01 - 2015-07-08 00:11 - 00000000 ____ D C:\AdwCleaner
2015-07-07 23:55 - 2015-07-07 23:56 - 02244096 _____ C:\Users\Natalka\Downloads\adwcleaner_4.207.exe
C:\ProgramData\SetStretch.exe
C:\ProgramData\SetStretch.VBS
C:\Users\Natalka\piouri.exe
EmptyTemp:
Plik zapisz jako fixlist.txt i umieść w tym samym katalogu co FRST Uruchom FRST klikasz Fix Raport z usuwania pokaż na forum. Następnie ponownie uruchom FRST klikasz Scan pokaż nowy raport FRST.txt na forum