Tak wygląda u mnie każda strona, odnośniki w słowach do reklamy itp…
Pobierz i uruchom AdwCleaner Kliknij Scan i później Cleaning.
Kliknij Scan i pokaż nowy raport z FRST bez Addition.
Dalej to samo, w dodatku teraz rozszerzenie do chrome speeddial2 nie działa.
Odinstaluj Phrase Finder 1.10.0.9.
Wklej do systemowego notatnika i zapisz jako plik tekstowy o nazwie fixlist :
CloseProcesses:
Startup: C:\Users\Adam\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Win8.1_Lumia_drivers_new.rar.lnk
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
CHR StartupUrls: Default -> "chrome://speeddial/content/speeddial.xul", "about:blank", "hxxp://www.google.com/", "hxxp://isearch.omiga-plus.com/?type=hp&ts=1403913202&from=smt&uid=WDCXWD3200AAJS-00B4A0_WD-WMAT1368269182691", "hxxp://www.search.ask.com/?tpid=SPC-SP&o=APN10951&pf=V7&trgb=CR&p2=%5EB20%5Eaaa166%5EYY%5EPL&gct=hp&apn_ptnrs=%5EB20&apn_dtid=%5Eaaa166%5EYY%5EPL&apn_dbr=cr_34.0.1847.116&apn_uid=05129BC4-32C1-492F-AF26-6AF7F0C77462&itbv=12.16.2.1855&doi=2014-09-14&psv=&pt=tb", "hxxp://www.mystartsearch.com/?type=hp&ts=1413576447&from=amt&uid=395049983_1052498_98769CA9", "hxxp://www.mystartsearch.com/?type=hp&ts=1414867051&from=amt&uid=WDCXWD3200AAJS-00B4A0_WD-WMAT1368269182691", "hxxp://websearch.searchmania.info/?pid=2921&r=2014/12/13&hid=1821077304871203790&lg=EN&cc=PL&unqvl=70", "hxxp://www.sweet-page.com/?type=hp&ts=1423649064&from=cor&uid=WDCXWD3200AAJS-00B4A0_WD-WMAT1368269182691"
StartMenuInternet: (HKLM) OperaStable - C:\Program Files\Opera\Launcher.exe http://www.mystartsearch.com/?type=sc&ts=1414867051&from=amt&uid=WDCXWD3200AAJS-00B4A0_WD-WMAT1368269182691
CHR Extension: (GrabViews Viewer) - C:\Users\Adam\AppData\Local\Google\Chrome\User Data\Default\Extensions\feoefhcjipcankneggepliocjnfohabn [2014-12-18]
R3 AsrOcDrv; \??\C:\Windows\system32\Drivers\AsrOcDrv.sys [X]
S3 cpuz136; \??\C:\Windows\TEMP\cpuz136\cpuz136_x32.sys [X]
R3 GPU-Z; \??\C:\Users\Adam\AppData\Local\Temp\GPU-Z.sys [X]
Phrase FinderpfnfdR1 pfnfd_1_10_0_9; C:\Windows\System32\drivers\pfnfd_1_10_0_9.sys [52728 2015-02-06] (Phrase Finder)
S3 kxwdmdrv; \SystemRoot\system32\drivers\kx.sys [X]
S1 MpKsl442f9801; \??\C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{6765B588-DC8F-44D4-B9FB-D61AF543E2AB}\MpKsl442f9801.sys [X]
U2 TMAgent; No ImagePath
2015-02-14 22:56 - 2015-02-14 22:58 - 00000000 ____ D () C:\AdwCleaner
2015-02-06 21:01 - 2015-02-06 21:01 - 00052728 _____ (Phrase Finder) C:\Windows\system32\Drivers\pfnfd_1_10_0_9.sys
2015-01-31 18:53 - 2015-01-31 18:53 - 00000000 __SHD () C:\found.004
2015-01-31 18:53 - 2015-01-31 18:53 - 00000000 __SHD () C:\found.003
2015-01-31 18:53 - 2015-01-31 18:53 - 00000000 __SHD () C:\found.002
2015-01-31 18:53 - 2015-01-31 18:53 - 00000000 __SHD () C:\found.001
2015-01-31 18:53 - 2015-01-31 18:53 - 00000000 __SHD () C:\found.000
2015-01-29 07:52 - 2015-02-11 11:44 - 00000000 ____ D () C:\Temp
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CleanHlp => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CleanHlp.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\CleanHlp => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\CleanHlp.sys => ""="Driver"
EmptyTemp:
Uruchom FRST i kliknij Fix. Pokaż raport z usuwania Fixlog.
Kliknij Scan i pokaż nowy raport z FRST bez Addition.