Siemka, gdy odpalam kompa programy same się instalują i to dużo. Oto skany:
FRST: http://www.wklej.org/id/1791967/
Addition: http://www.wklej.org/id/1791968/
Shortcut: http://www.wklej.org/id/1791969/
Otwórz notatnik systemowy i wklej:
globalupdate Helper (x32 Version: 1.3.25.0 - globalupdate Inc.) Hidden ==== UWAGA
Task: {05E21A19-8934-48F9-BE00-93D090A4CEA0} - System32\Tasks\globalUpdateUpdateTaskMachineUA = C:\Program Files (x86)\globalUpdate\Update\globalupdate.exe [2015-09-07] (globalUpdate) ==== UWAGA
Task: {3EB7F30C-A36D-4BC7-B24D-BF14607CD0F8} - System32\Tasks\v16mLy0s3LyXmMAA = C:\Users\Kondziu\AppData\Roaming\v16mLy0s3LyXmMAA.exe [2015-04-20] () ==== UWAGA
Task: {83DBA141-448D-49A9-B53F-01ACA31A7401} - System32\Tasks\APSnotifierPP3 = C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe ==== UWAGA
Task: {8A3B9ABF-3164-4CB1-9F99-400E76249886} - System32\Tasks\SmartWeb Upgrade Trigger Task = C:\Users\Kondziu\AppData\Local\SmartWeb\SmartWebHelper.exe ==== UWAGA
Task: {A6BC8B5B-B3D6-4555-ABB9-57D9334425E0} - System32\Tasks\39arq1msu21zCQk6if9CXGaL = C:\Users\Kondziu\AppData\Roaming\39arq1msu21zCQk6if9CXGaL.exe [2015-04-20] () ==== UWAGA
Task: {A6EAB5AC-4E8C-4CE2-A497-93D983BB59F9} - System32\Tasks\globalUpdateUpdateTaskMachineCore = C:\Program Files (x86)\globalUpdate\Update\globalupdate.exe [2015-09-07] (globalUpdate) ==== UWAGA
Task: {E349BD48-A85B-4454-8BE6-1F731CEE879D} - System32\Tasks\APSnotifierPP2 = C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe ==== UWAGA
Task: {EE8D45EE-8242-4EC1-AAA8-1F7E3A7FE2FC} - System32\Tasks\APSnotifierPP1 = C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe ==== UWAGA
Task: C:\Windows\Tasks\39arq1msu21zCQk6if9CXGaL.job = C:\Users\Kondziu\AppData\Roaming\39arq1msu21zCQk6if9CXGaL.exe ==== UWAGA
Task: C:\Windows\Tasks\APSnotifierPP1.job = C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe ==== UWAGA
Task: C:\Windows\Tasks\APSnotifierPP2.job = C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe ==== UWAGA
Task: C:\Windows\Tasks\APSnotifierPP3.job = C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe ==== UWAGA
Task: C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job = C:\Program Files (x86)\globalUpdate\Update\globalupdate.exe ==== UWAGA
Task: C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job = C:\Program Files (x86)\globalUpdate\Update\globalupdate.exe ==== UWAGA
Task: C:\Windows\Tasks\v16mLy0s3LyXmMAA.job = C:\Users\Kondziu\AppData\Roaming\v16mLy0s3LyXmMAA.exe ==== UWAGA
HKLM-x32\...\Run: [gmsd_pl_005010082] = [X]
BHO-x32: Maximum Maker - {9a8e897c-6cf8-4049-b901-7fc2137c4d4f} - C:\Program Files (x86)\Maximum Maker\Extensions\9a8e897c-6cf8-4049-b901-7fc2137c4d4f.dll Brak pliku
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe hxxp://www.mystartsearch.com/?type=scts=1441445496z=6f59d3e03c2835da4d8dfd0g0z9z1gczez3w7cew1wfrom=imauid=ST380215A_5QZ0BHGSXXXX5QZ0BHGS
StartMenuInternet: (HKLM) OperaStable - C:\Program Files (x86)\Opera\Launcher.exe http://www.istartsurf.com/?type=scts=1441641405z=198d61123195bb940b2cb22gbzbzeg0qfz3g6o9q5efrom=faceuid=ST380215A_5QZ0BHGSXXXX5QZ0BHGS
S2 globalUpdate; C:\Program Files (x86)\globalUpdate\Update\globalupdate.exe [68608 2015-09-07] (globalUpdate) [Brak podpisu cyfrowego] ==== UWAGA
S3 globalUpdatem; C:\Program Files (x86)\globalUpdate\Update\globalupdate.exe [68608 2015-09-07] (globalUpdate) [Brak podpisu cyfrowego] ==== UWAGA
S3 cpuz134; \\C:\Users\Kondziu\AppData\Local\Temp\cpuz134\cpuz134_x64.sys [X]
S1 wsafd_1_10_0_19; system32\drivers\wsafd_1_10_0_19.sys [X]
2015-09-07 18:28 - 2015-09-07 18:28 - 00000000 __SHD C:\Users\Kondziu\AppData\Roaming\AnyProtectEx
2015-09-07 18:26 - 2015-09-07 18:26 - 00000000 ____ D C:\Program Files (x86)\predm
2015-09-07 17:58 - 2015-09-07 17:58 - 00000000 ____ D C:\ProgramData\ZWdsManProZ
2015-09-07 17:56 - 2015-09-07 18:28 - 00000000 ____ D C:\Users\Kondziu\AppData\Local\SmartWeb
2015-09-07 17:56 - 2015-09-07 18:27 - 00000000 ____ D C:\Users\Kondziu\AppData\Roaming\istartsurf
2015-09-07 17:56 - 2015-09-07 17:56 - 00004048 _____ C:\Windows\System32\Tasks\SmartWeb Upgrade Trigger Task
2015-09-05 11:33 - 2015-09-07 18:38 - 00000000 ____ D C:\Program Files (x86)\AE1CEBF1-1441445597-A140-AB7C-B5DC8F4BB611
2015-09-05 11:33 - 2015-09-05 11:37 - 00000000 ____ D C:\Users\Kondziu\AppData\Roaming\systweak
2015-09-05 11:33 - 2015-07-02 14:14 - 00020248 _____ () C:\Windows\system32\roboot64.exe
2015-09-05 11:32 - 2015-09-05 11:33 - 00000000 ____ D C:\ProgramData\9WdsManPro9
2015-09-05 11:31 - 2015-09-05 11:39 - 00000000 ____ D C:\Users\Kondziu\AppData\Roaming\mystartsearch
2015-09-05 11:29 - 2015-09-07 18:00 - 00000000 ____ D C:\Program Files (x86)\globalUpdate
2015-09-05 11:29 - 2015-09-05 11:29 - 00000000 ____ D C:\Users\Kondziu\AppData\Local\globalUpdate
2015-04-19 14:20 - 2015-04-19 14:20 - 0005872 _____ () C:\Users\Kondziu\AppData\Roaming\39arq1msu21zCQk6if9CXGaL
2015-04-20 16:05 - 2015-04-20 16:05 - 1579520 _____ () C:\Users\Kondziu\AppData\Roaming\39arq1msu21zCQk6if9CXGaL.exe
2015-04-19 14:20 - 2015-04-19 14:20 - 0005872 _____ () C:\Users\Kondziu\AppData\Roaming\v16mLy0s3LyXmMAA
2015-04-20 16:05 - 2015-04-20 16:05 - 1579520 _____ () C:\Users\Kondziu\AppData\Roaming\v16mLy0s3LyXmMAA.exe
2015-09-07 18:28 - 2015-09-07 18:28 - 0613255 _____ (CMI Limited) C:\Users\Kondziu\AppData\Local\nsi8C1C.tmp
2015-09-05 11:40 - 2015-09-05 11:40 - 0260876 _____ (VuuPC Limited) C:\Users\Kondziu\AppData\Local\nsw4357.tmp
C:\ProgramData\{262E20B8-6E20-4CEF-B1FD-D022AB1085F5}.dat
EmptyTemp:
Plik zapisz pod nazwą fixlist.txt i umieść obok FRST w tym samym folderze.