Prosze o sprawdzenie logu

Dla specjalistów Bezpieczeństwo
#1

Witam prosze o sprawdzenie moje go logu z otl poniewaz mbam znalazl dosc sporo zlosliwego oprogramowania

 chcial bym miec pewnosc ze wszystko zostalo usuniete jak nalezy

 

oto moj Log

 

OTL LOG

http://wklej.to/DAR6F

 

EXTRAS

 

http://wklej.to/7y9SG

#2

Pobierz Farbar Recovery Scan Tool http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/ zgodny z wersją systemu 32-bit lub 64-bit.

#3

 

 

 

FRST.TXT

 

http://wklej.to/75JWI

 

Addition.txt

 

http://wklej.to/VVQp5

 

#4

Otwórz notatnik systemowy i wklej:

Task: {30CD2C02-2589-466B-A58F-E59C3C8596ED} - System32\Tasks\{42DB5581-7D76-4F16-86E6-10102DF40F93} = pcalua.exe -a "C:\Users\Elżbieta\AppData\Local\Pay-By-Ads\Yahoo! Search\1.3.25.0\dsrsetup.exe" -c /uninstl
HKLM\...\Policies\Explorer: [NoControlPanel] 0
ShellIconOverlayIdentifiers: [00avast] - {472083B0-C522-11CF-8763-00608CC02F24} = No File
GroupPolicy: Group Policy on Chrome detected ======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction ======= ATTENTION
HKU\S-1-5-21-1130717140-2897654117-2675715063-1002\Software\Microsoft\Internet Explorer\Main,Start Page = ?type=hppp
SearchScopes: HKLM - {C0AEEC99-925B-4758-86CC-779F7E340798} URL = http://www.amazon.co.uk/s/ref=azs_osd_ieauk?ie=UTF-8tag=hp-uk3-vsb-21link%5Fcode=qsindex=apsfield-keywords={searchTerms}
SearchScopes: HKLM-x32 - {C0AEEC99-925B-4758-86CC-779F7E340798} URL = http://www.amazon.co.uk/s/ref=azs_osd_ieauk?ie=UTF-8tag=hp-uk3-vsb-21link%5Fcode=qsindex=apsfield-keywords={searchTerms}
SearchScopes: HKU\.DEFAULT - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-1130717140-2897654117-2675715063-1002 - {FAC46714-A1A3-496A-933B-0C038D0F1ECE} URL = http://q.search-simple.com/?affID=naq={searchTerms}r=179
FF NewTab: hxxp://search.yahoo.com/?fr=hp-ddc-bd-tabtype=616_pr __alt__ ddc_dsssyctab_bd_com
FF DefaultSearchEngine: Yahoo! Search
FF Keyword.URL: hxxp://search.yahoo.com/yhs/search?hspart=ddchsimp=yhs-ddc_bdtype=616_pr __alt__ ddc_dss_bd_comp=
FF SearchPlugin: C:\Users\Elżbieta\AppData\Roaming\Mozilla\Firefox\Profiles\gr97dmyw.default\searchplugins\search-simple.xml [2015-03-23]
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\.xml [2015-03-31]
FF Extension: Zoom It - C:\Users\Elżbieta\AppData\Roaming\Mozilla\Firefox\Profiles\gr97dmyw.default\Extensions\{d2ae1b22-f0a8-27e6-2ffb-005f229611dd} [2015-03-04]
FF Extension: ace race 1.0.1 - C:\Users\Elżbieta\AppData\Roaming\Mozilla\Firefox\Profiles\gr97dmyw.default\Extensions\{56db9de0-c769-4563-8e82-7e39885bf1ad}.xpi [2015-01-26]
CHR RestoreOnStartup: Default - "hxxp://search.yahoo.com/?fr=hp-ddc-bdtype=616_pr __alt__ ddc_dsssyc_bd_com"
CHR StartupUrls: Default - "?type=hppp"
CHR DefaultSearchURL: Default - web/?type=dsppq={searchTerms}
CHR Extension: (ace race) - C:\Users\Elżbieta\AppData\Local\Google\Chrome\User Data\Default\Extensions\eiknpkdjaijoilnmlcmkgcelkafbnpbl [2015-03-01]
2015-03-31 15:22 - 2015-03-31 15:22 - 00003174 _____ () C:\Windows\System32\Tasks\{42DB5581-7D76-4F16-86E6-10102DF40F93}
EmptyTemp:

Plik zapisz pod nazwą fixlist.txt i umieść obok FRST w tym samym folderze.

#5

log po wykonaniu skryptu

 

Fixlog.txt

 

http://wklej.to/sBFjb

#6

Skasuj folder C:\FRST

#7

OTL i  FRST  skasowany jeszcze raz dziękuje