Prośba o pomoc w usunięciu reklam

Dla specjalistów Bezpieczeństwo
#1

Witam, 

Proszę o pomoc w usunięciu reklam.

Z góry dziękuję za pomoc.

 

 

FRST:  http://wklej.to/ymoAI

Addition :http://wklej.to/XxokZ

Shortcut: http://wklej.to/BtxxF

#2

Odinstaluj istartsurf uninstall,OpenOffice.org 3.3.0 Packages,sweet-page uninstall,Winamp Full 5.666.3516 Packages,WindowsMangerProtect20.0.0.502.Pobierz i uruchom jako administrator AdwCleaner https://toolslib.net/downloads/finish/1/ Kliknij Scan i później Cleaning.

Pokaż nowe logi z FRST.

#3

FRST:  http://wklej.to/9s0oP

Addition : http://wklej.to/Nxhuj

Shortcut:  http://wklej.to/V8hjD

#4

Otwórz notatnik systemowy i wklej:

Task: {4B24A8B2-6D30-4B3E-84BD-27D3EC5F8742} - System32\Tasks\LaunchSignup = C:\Program Files\MyPC Backup\Signup Wizard.exe ==== ATTENTION
HKLM\...\Run: [] = [X]
HKU\S-1-5-21-4123070600-908984474-2298697669-1000\...\Run: [AVG-Secure-Search-Update_1213b] = C:\Users\DELL\AppData\Roaming\AVG 1213b Campaign\AVG-Secure-Search-Update-1213b.exe /PROMPT /mid=a8e5b420ae7047d281a0d168369eb382-a8f5061b1d4aa2c7a81498ed6465f47047bebb81 /CMPID=1213b
HKU\S-1-5-21-4123070600-908984474-2298697669-1000\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
SearchScopes: HKLM - DefaultScope value is missing
SearchScopes: HKU\S-1-5-21-4123070600-908984474-2298697669-1000 - DefaultScope {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} URL = http://www.istartsurf.com/web/?utm_source=butm_medium=corutm_campaign=install_ieutm_content=dsfrom=coruid=WDCXWD1600BEVT-75A23T0_WD-WX71A40D8976D8976ts=1435582818type=defaultq={searchTerms}
SearchScopes: HKU\S-1-5-21-4123070600-908984474-2298697669-1000 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://www.istartsurf.com/web/?utm_source=butm_medium=corutm_campaign=install_ieutm_content=dsfrom=coruid=WDCXWD1600BEVT-75A23T0_WD-WX71A40D8976D8976ts=1435582818type=defaultq={searchTerms}
SearchScopes: HKU\S-1-5-21-4123070600-908984474-2298697669-1000 - {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} URL = http://www.istartsurf.com/web/?utm_source=butm_medium=corutm_campaign=install_ieutm_content=dsfrom=coruid=WDCXWD1600BEVT-75A23T0_WD-WX71A40D8976D8976ts=1435582818type=defaultq={searchTerms}
SearchScopes: HKU\S-1-5-21-4123070600-908984474-2298697669-1000 - {E733165D-CBCF-4FDA-883E-ADEF965B476C} URL = http://www.istartsurf.com/web/?utm_source=butm_medium=corutm_campaign=install_ieutm_content=dsfrom=coruid=WDCXWD1600BEVT-75A23T0_WD-WX71A40D8976D8976ts=1435582818type=defaultq={searchTerms}
SearchScopes: HKU\S-1-5-21-4123070600-908984474-2298697669-1000 - {szukaj.gazeta.pl} URL = http://www.istartsurf.com/web/?utm_source=butm_medium=corutm_campaign=install_ieutm_content=dsfrom=coruid=WDCXWD1600BEVT-75A23T0_WD-WX71A40D8976D8976ts=1435582818type=defaultq={searchTerms}
BHO: Music Search App (Dist. by Musiclab, Inc.) - {41ca0640-a64c-4262-8540-36c33ee58961} - C:\PROGRA~1\MUSICA~1\Datamngr\SRTOOL~1\IE\searchresultsDx.dll No File
BHO: LuckyTab Class - {51D26BB4-4D2C-4AE4-9873-5FF41B6DED1F} - C:\Program Files\MiuiTab\SupTab.dll [2015-06-16] (Thinknice Co. Limited)
Toolbar: HKLM - Music Search App (Dist. by Musiclab, Inc.) - {41ca0640-a64c-4262-8540-36c33ee58961} - C:\PROGRA~1\MUSICA~1\Datamngr\SRTOOL~1\IE\searchresultsDx.dll No File
FF SearchPlugin: C:\Users\DELL\AppData\Roaming\Mozilla\Firefox\Profiles\ujq5fz60.default\searchplugins\istartsurf.xml [2015-07-27]
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\wtu-secure-search.xml [2015-07-27]
FF Extension: Web Finder Pro - C:\Users\DELL\AppData\Roaming\Mozilla\Firefox\Profiles\ujq5fz60.default\Extensions\{9802047e-5a84-4da3-b103-c55995d147d1} [2014-10-04]
FF Extension: Default SearchProtected - C:\Users\DELL\AppData\Roaming\Mozilla\Firefox\Profiles\ujq5fz60.default\Extensions\defsearchp@gmail.com.xpi [2015-07-09]
R2 IHProtect Service; C:\Program Files\MiuiTab\ProtectService.exe [125112 2015-06-16] (XTab system)
S2 vToolbarUpdater3.3.0; C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\3.3.0\ToolbarUpdater.exe [X]
S2 WindowsMangerProtect; C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe -service [X] ==== ATTENTION
R1 {6fcd6092-9615-4f7f-8898-8df53980e5d2}Gw; C:\Windows\System32\drivers\{6fcd6092-9615-4f7f-8898-8df53980e5d2}Gw.sys [52920 2014-07-04] (StdLib)
S3 cpuz134; \\C:\Users\DELL\AppData\Local\Temp\cpuz134\cpuz134_x32.sys [X]
S1 ttnfd; system32\drivers\ttnfd.sys [X]
EmptyTemp:

Plik zapisz pod nazwą fixlist.txt i umieść obok FRST w tym samym folderze.