Proszę o pomoc z usunięciem RoundWorld

Dla specjalistów Bezpieczeństwo
#1

Witam.

Bardzo proszę o pomoc w usunięciu RoundWorld,nie znam się i kompletnie nie mam pojęcia jak to zrobić.

 

FRST: http://www.wklej.org/id/1656492/

Addition: http://www.wklej.org/id/1656495/

#2

Otwórz notatnik systemowy i wklej:

HKLM\...\Run: [RtHDVCpl] = C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13667032 2014-02-24] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] = C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1379544 2014-03-05] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_LENOVO_MICPKEY] = C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1379544 2014-03-05] (Realtek Semiconductor)
GroupPolicy: Group Policy on Chrome detected ======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction ======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://do-search.com/web/?type=dsts=1425572021from=coruid=WDCXWD10S21X-24R1BT0-SSHD-8GB_WD-WX11A934056840568q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://do-search.com/web/?type=dsts=1425572021from=coruid=WDCXWD10S21X-24R1BT0-SSHD-8GB_WD-WX11A934056840568q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://do-search.com/web/?type=dsts=1425572021from=coruid=WDCXWD10S21X-24R1BT0-SSHD-8GB_WD-WX11A934056840568q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://do-search.com/web/?type=dsts=1425572021from=coruid=WDCXWD10S21X-24R1BT0-SSHD-8GB_WD-WX11A934056840568q={searchTerms}
HKU\S-1-5-21-2151919217-2557791427-1888986169-1001\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
BHO-x32: Round World 1.0.0.7 - {78549bde-b964-4d2a-b7b1-c4ac15ddff64} - C:\Program Files (x86)\Round World\RoundWorldbho.dll No File
FF Extension: Round World 1.0.1 - C:\Users\Karolina\AppData\Roaming\Mozilla\Firefox\Profiles\yy1k137w.default-1425593800920\Extensions\{8f5b8fd1-2f96-4fbf-974b-7f28fa0f93d7}.xpi [2015-03-07]
R2 Update Round World; C:\Program Files (x86)\Round World\updateRoundWorld.exe [400112 2015-03-07] ()
R2 Util Round World; C:\Program Files (x86)\Round World\bin\utilRoundWorld.exe [400112 2015-03-07] ()
R2 WindowsMangerProtect; C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe [493712 2015-03-05] (SysTool PasSame LIMITED)
2015-03-05 17:14 - 2015-03-05 17:21 - 00000000 ____ D () C:\ProgramData\WindowsMangerProtect
2015-03-03 00:25 - 2015-03-07 12:06 - 00000000 ____ D () C:\Program Files (x86)\Round World
EmptyTemp:

Plik zapisz pod nazwą fixlist.txt i umieść obok FRST w tym samym folderze.

#3

Chyba pomogło… Odrazu potem zainstalowałem Mozille i wyskoczył komunikat o jakimś ClockHand,nie wiem co teraz zrobić,i skąd się to bierze. Mógłbyś mi jeszcze pomóc?

#4

Pokaż nowe logi z FRST.