Witam!
Za każdym razem jak próbuję wpisać jakiś tekst na stronie, najpierw otwiera się nowe okno z reklamą, muszę je najpierw zamknąć i dopiero wtedy mogę cokolwiek pisać.
Wklejam logi z Frst
Frst: http://wklej.to/fnOwk
Addition: http://wklej.to/8e0Zj
Shortcut: http://wklej.to/l8cLL
Dzięki za pomoc.
Ile razy założysz podobny temat? Przestań wreszcie instalować śmieci.
Wklej do systemowego notatnika i zapisz jako plik tekstowy o nazwie fixlist :
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.aqovd.com?oem=sunadplv3uid=5VGAXR0Y_ST9250410AStm=1445410565
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.aqovd.com?oem=sunadplv3uid=5VGAXR0Y_ST9250410AStm=1445410565
HKU\S-1-5-21-2732720760-1102668005-1550507191-1000\Software\Microsoft\Internet Explorer\Main,Start Page = www.aqovd.com?oem=sunadplv3uid=5VGAXR0Y_ST9250410AStm=1445410565
FF Homepage: www.aqovd.com?oem=sunadplv3uid=5VGAXR0Y_ST9250410AStm=1445410565
OPR Extension: (帮5淘—帮5买旗下购物助手) - C:\Users\Lapek\AppData\Roaming\Opera Software\Opera Stable\Extensions\nklfajnmfbchcceflgddnkignfheooic [2015-10-20]
C:\Users\Lapek\AppData\Roaming\Opera Software\Opera Stable\Extensions\nklfajnmfbchcceflgddnkignfheooic
2015-10-21 14:20 - 2015-10-21 14:21 - 00000000 ____ D C:\AdwCleaner
2015-10-21 14:17 - 2015-10-21 14:21 - 00001027 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\zf3i4r6e6f5o4x.lnk
2015-10-20 20:42 - 2015-10-21 13:38 - 00000102 _____ C:\ProgramData\{262E20B8-6E20-4CEF-B1FD-D022AB1085F5}.dat
2015-10-20 20:33 - 2015-10-21 13:55 - 00000004 _____ C:\Windows\system32\029B560A371F4E00AB32838EBC01B9E7
2015-10-20 20:32 - 2015-09-07 08:13 - 00000856 _____ C:\Windows\system32\Drivers\etc\hp.bak
2015-10-20 20:28 - 2015-10-21 14:13 - 00000000 ____ D C:\Users\Lapek\AppData\LocalLow\Unity
2015-10-20 20:28 - 2015-10-20 20:28 - 00000000 ____ D C:\Users\Public\QiYi
2015-10-20 20:26 - 2015-10-20 20:26 - 00000000 ____ D C:\Program Files\baidu
2015-10-15 10:52 - 2015-10-15 10:52 - 00914088 _____ (Web program ) C:\Users\Lapek\Downloads\Adobe-AIR-13092-dp.exe
2015-04-14 18:28 - 2015-04-14 18:28 - 0004387 _____ () C:\Users\Lapek\AppData\Roaming\1VGODVvEMbvvAol
2015-04-14 18:28 - 2015-04-14 18:28 - 0004387 _____ () C:\Users\Lapek\AppData\Roaming\4DnbcdcetS7uFhNcRnseEnE
2015-04-14 18:28 - 2015-04-14 18:28 - 0004387 _____ () C:\Users\Lapek\AppData\Roaming\czn8WdvL5YMwl
2015-04-14 18:28 - 2015-04-14 18:28 - 0004387 _____ () C:\Users\Lapek\AppData\Roaming\PVRioLGXnYkMnvOgbvR07Wpc6
2015-04-14 18:28 - 2015-04-14 18:28 - 0004387 _____ () C:\Users\Lapek\AppData\Roaming\vWHOmMW1ujVG3YO30
2015-04-20 16:05 - 2015-04-20 16:05 - 1246720 _____ () C:\Users\Lapek\AppData\Roaming\vWHOmMW1ujVG3YO30.exe
C:\Users\Lapek\AppData\Roaming\*.exe
Task: {1CABB0E5-08D0-4B80-BB3E-2F36694EE5F8} - System32\Tasks\PVRioLGXnYkMnvOgbvR07Wpc6 = C:\Users\Lapek\AppData\Roaming\PVRioLGXnYkMnvOgbvR07Wpc6.exe [2015-04-20] () ==== UWAGA
Task: {620967B4-3D45-4A2E-A5E1-5F2E140AD971} - System32\Tasks\1VGODVvEMbvvAol = C:\Users\Lapek\AppData\Roaming\1VGODVvEMbvvAol.exe [2015-04-20] () ==== UWAGA
Task: {80848882-7553-4435-B571-211C0E73BFED} - System32\Tasks\vWHOmMW1ujVG3YO30 = C:\Users\Lapek\AppData\Roaming\vWHOmMW1ujVG3YO30.exe [2015-04-20] () ==== UWAGA
Task: {913865D2-CB81-4D77-B0FA-E46E1A436202} - System32\Tasks\czn8WdvL5YMwl = C:\Users\Lapek\AppData\Roaming\czn8WdvL5YMwl.exe [2015-04-20] () ==== UWAGA
Task: {9E374028-5D22-4450-A7D4-CAF026F1AF19} - System32\Tasks\Opera N Sunday = C:\Program Files\Opera\launcher.exe
Task: {BE6CC941-EABC-424F-A794-B01AD61D1815} - System32\Tasks\4DnbcdcetS7uFhNcRnseEnE = C:\Users\Lapek\AppData\Roaming\4DnbcdcetS7uFhNcRnseEnE.exe [2015-04-20] () ==== UWAGA
Task: {EC44C7F2-604B-4AB6-A05C-9080D868B6F3} - System32\Tasks\Opera N Saturday = C:\Program Files\Opera\launcher.exe
Task: C:\Windows\Tasks\1VGODVvEMbvvAol.job = C:\Users\Lapek\AppData\Roaming\1VGODVvEMbvvAol.exe ==== UWAGA
Task: C:\Windows\Tasks\4DnbcdcetS7uFhNcRnseEnE.job = C:\Users\Lapek\AppData\Roaming\4DnbcdcetS7uFhNcRnseEnE.exe ==== UWAGA
Task: C:\Windows\Tasks\czn8WdvL5YMwl.job = C:\Users\Lapek\AppData\Roaming\czn8WdvL5YMwl.exe ==== UWAGA
Task: C:\Windows\Tasks\PVRioLGXnYkMnvOgbvR07Wpc6.job = C:\Users\Lapek\AppData\Roaming\PVRioLGXnYkMnvOgbvR07Wpc6.exe ==== UWAGA
Task: C:\Windows\Tasks\vWHOmMW1ujVG3YO30.job = C:\Users\Lapek\AppData\Roaming\vWHOmMW1ujVG3YO30.exe ==== UWAGA
FirewallRules: [{C47B74C1-F8B3-4D86-A445-26F9DA1E0F02}] = (Allow) C:\Users\Lapek\AppData\Roaming\IQIYI Video\LStyle\GpUpdate.exe
FirewallRules: [{E3992308-3872-46EF-84EE-0D5B14AF0596}] = (Allow) C:\IQIYI Video\GeePlayer\GeePlayer.exe
FirewallRules: [{5158866F-A307-48C2-B127-9D9443BDFA9D}] = (Allow) C:\Users\Lapek\AppData\Roaming\IQIYI Video\LStyle\QyUpdate.exe
FirewallRules: [{49CE4255-607F-4356-B67E-5D833ECA226B}] = (Allow) C:\IQIYI Video\LStyle\QyClient.exe
FirewallRules: [{A72FEC71-0C6E-4CB4-BB6F-3A3950569CD6}] = (Allow) C:\IQIYI Video\LStyle\QyWebPlayer.exe
FirewallRules: [{206A2242-B84F-43BB-8C79-A693D3C2DD84}] = (Allow) C:\IQIYI Video\Common\QyKernel.exe
FirewallRules: [{79CE0ADB-F07A-4ECC-8EA3-4CFF5F2E7498}] = (Allow) C:\IQIYI Video\LStyle\QyPlayer.exe
FirewallRules: [{F7AE9018-B477-4BC5-A627-85CBAC8CBCB4}] = (Allow) C:\Program Files\Max Driver Updater\maxdu.exe
FirewallRules: [{8EE57A99-90D0-46E6-A6DC-0D684B23179B}] = (Allow) C:\IQIYI Video\GeePlayer\GeePlayer.exe
FirewallRules: [{7AACE200-8402-4E16-90BE-B15AE6D405F7}] = (Allow) C:\Users\Lapek\AppData\Roaming\IQIYI Video\LStyle\QyUpdate.exe
FirewallRules: [{41679AB1-D00C-49EE-BB99-C23798709D90}] = (Allow) C:\IQIYI Video\LStyle\QyClient.exe
FirewallRules: [{0F48C1E9-4A63-49E2-B19D-D0E63E231D47}] = (Allow) C:\IQIYI Video\LStyle\QyKernel.exe
FirewallRules: [{D8AEDBAF-402B-49DF-A3FB-14C2B78C6392}] = (Allow) C:\IQIYI Video\LStyle\QyMiniPlayer.exe
FirewallRules: [{47B0E4CA-85BF-4FD7-AB73-A3C3BF308F94}] = (Allow) C:\IQIYI Video\LStyle\QyPlayer.exe
EmptyTemp:
Uruchom FRST i kliknij Napraw (Fix). Pokaż raport z usuwania Fixlog.
Skasuj folder C:\FRST