Sale charger ads- AdwCleaner nie dał rady

Sandraaa055 · 26 Maj 2015 21:26

Witam,

Próbowałam to usunąć kilkoma sposobami ale niestety nic nie zadziałało. Niżej przesyłam logi z FRST. Proszę o pomoc.

Atis · 26 Maj 2015 21:45

Wklej do systemowego notatnika i zapisz jako plik tekstowy o nazwie fixlist :

CloseProcesses:
HKLM-x32\...\Run: [mcui_exe] => "C:\Program Files\McAfee.com\Agent\mcagent.exe" /runkey
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://do-search.com/web/?type=ds&ts=1432575388&z=a78e3a9710272ff4546ea1dgcz9c8o6wem6w0cfbbg&from=cor&uid=SAMSUNGXMZMTD128HAFV-000L1_S15FNSAD417591&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://do-search.com/web/?type=ds&ts=1432575388&z=a78e3a9710272ff4546ea1dgcz9c8o6wem6w0cfbbg&from=cor&uid=SAMSUNGXMZMTD128HAFV-000L1_S15FNSAD417591&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://do-search.com/web/?type=ds&ts=1432575388&z=a78e3a9710272ff4546ea1dgcz9c8o6wem6w0cfbbg&from=cor&uid=SAMSUNGXMZMTD128HAFV-000L1_S15FNSAD417591&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://do-search.com/web/?type=ds&ts=1432575388&z=a78e3a9710272ff4546ea1dgcz9c8o6wem6w0cfbbg&from=cor&uid=SAMSUNGXMZMTD128HAFV-000L1_S15FNSAD417591&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1813061479-3744488325-3651268105-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-1813061479-3744488325-3651268105-1001 -> {3285638A-638D-469B-843C-C01DE82F74CD} URL = 
CHR Extension: (Bookmark Manager) - C:\Users\MM\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmlllbghnfkpflemihljekbapjopfjik [2015-05-19]
CHR Extension: (Sale Charger) - C:\Users\MM\AppData\Local\Google\Chrome\User Data\Default\Extensions\iibdoiekonjljopmdecaheocdpocgeoa [2015-05-26]
R2 Service Mgr SaleCharger; C:\ProgramData\322cb724-1680-423d-8862-1b52ca5027ad\plugincontainer.exe [556304 2015-05-26] () <==== ATTENTION
R2 Update Mgr SaleCharger; C:\Program Files (x86)\Common Files\322cb724-1680-423d-8862-1b52ca5027ad\updater.exe [478992 2015-05-26] () <==== ATTENTION
C:\ProgramData\322cb724-1680-423d-8862-1b52ca5027ad
C:\Program Files (x86)\Common Files\322cb724-1680-423d-8862-1b52ca5027ad
C:\Program Files (x86)\Sale Charger
2015-05-25 19:35 - 2015-05-25 19:35 - 00709248 _____ (Installer ) C:\Users\MM\Downloads\Picasa(12733)-dp.exe
EmptyTemp:

Uruchom FRST i kliknij Fix. Pokaż raport z usuwania Fixlog.

Kliknij Scan i pokaż nowy raport z FRST bez Addition i Shortcut.