Saleplus - problem


(Love131) #1

Witam, mam problem z saleplus, gdyż po odinstalowaniu pojawia się znowu. Z góry dziękuję za pomoc :slight_smile:


(Acorus) #2

http://forum.dobreprogramy.pl/farbar-recovery-scan-tool-raport-obowiązkowy-t478727/


(Love131) #3

shortcut: http://www.wklej.org/id/1704556/


(Acorus) #4

Otwórz notatnik systemowy i wklej:

HKLM\...\Run: [AdobeAAMUpdater-1.0] = C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [446392 2012-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SwitchBoard] = C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS6ServiceManager] = C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1075296 2013-04-25] (Adobe Systems Incorporated)
HKU\S-1-5-21-4042390741-2272266397-2430433567-1000\...\Run: [AVG-Secure-Search-Update_0214c] = C:\Users\User\AppData\Roaming\AVG 0214c Campaign\AVG-Secure-Search-Update-0214c.exe /PROMPT /mid=8b711cea911147d29befa59d73e6356a-cbc9d74da94932965bb73e242cd355fb1255cdfe /CMPID=0214c
HKU\S-1-5-21-4042390741-2272266397-2430433567-1000\...\Run: [ALLUpdate] = C:\Program Files (x86)\ALLPlayer\ALLUpdate.exe [3000704 2014-01-29] (ALLPlayer Group Ltd.)
HKU\S-1-5-21-4042390741-2272266397-2430433567-1000\...\Run: [AdobeBridge] = [X]
Startup: C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Grand.Theft.Auto.V.Update.3_v1.0.335.2_.and._.v4-3DM.lnk [2015-05-04]
ShortcutTarget: Grand.Theft.Auto.V.Update.3_v1.0.335.2_.and._.v4-3DM.lnk - C:\ProgramData\{48d39f5a-047c-4db8-48d3-39f5a0477d68}\Grand.Theft.Auto.V.Update.3_v1.0.335.2_.and._.v4-3DM.exe (No File)
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction ======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page =
HKU\S-1-5-21-4042390741-2272266397-2430433567-1000\Software\Microsoft\Internet Explorer\Main,Start Page = https://mysearch.avg.com?cid={104F9C0B-09DC-4005-9DA2-8955B205E087}mid=8b711cea911147d29befa59d73e6356a-cbc9d74da94932965bb73e242cd355fb1255cdfelang=plds=AVGcoid=avgtbavgcmpid=0415tbpr=frd=2014-03-01 15:10:48v=18.4.0.889pid=safeguardsg=sap=hp
SearchScopes: HKLM-x32 - DefaultScope value is missing.
SearchScopes: HKU\S-1-5-21-4042390741-2272266397-2430433567-1000 - {95B7759C-8C7F-4BF1-B163-73684A933233} URL = https://mysearch.avg.com/search?cid={104F9C0B-09DC-4005-9DA2-8955B205E087}mid=8b711cea911147d29befa59d73e6356a-cbc9d74da94932965bb73e242cd355fb1255cdfelang=plds=AVGcoid=avgtbavgcmpid=0415tbpr=frd=2014-03-01 15:10:48v=18.4.0.889pid=safeguardsg=sap=dspq={searchTerms}
BHO-x32: AVG SafeGuard toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG SafeGuard toolbar\18.4.0.889\AVG SafeGuard toolbar_toolbar.dll [2015-05-05] (AVG Secure Search)
Toolbar: HKLM-x32 - AVG SafeGuard toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG SafeGuard toolbar\18.4.0.889\AVG SafeGuard toolbar_toolbar.dll [2015-05-05] (AVG Secure Search)
FF HKLM-x32\...\Firefox\Extensions: [avg@toolbar] - C:\ProgramData\AVG SafeGuard toolbar\FireFoxExt\17.3.1.91
FF Extension: AVG SafeGuard toolbar - C:\ProgramData\AVG SafeGuard toolbar\FireFoxExt\17.3.1.91 [2014-03-01]
CHR HomePage: Default - hxxp://mysearch.avg.com?cid={104F9C0B-09DC-4005-9DA2-8955B205E087}mid=8b711cea911147d29befa59d73e6356a-cbc9d74da94932965bb73e242cd355fb1255cdfelang=plds=AVGcoid=avgtbavgcmpid=pr=frd=2014-03-01 15:10:48v=17.3.1.91pid=safeguardsg=sap=hp
CHR StartupUrls: Default - "hxxp://mysearch.avg.com?cid={104F9C0B-09DC-4005-9DA2-8955B205E087}mid=8b711cea911147d29befa59d73e6356a-cbc9d74da94932965bb73e242cd355fb1255cdfelang=plds=AVGcoid=avgtbavgcmpid=pr=frd=2014-03-01 15:10:48v=17.3.1.91pid=safeguardsg=sap=hp", "hxxp://mysearch.avg.com?cid={104F9C0B-09DC-4005-9DA2-8955B205E087}mid=8b711cea911147d29befa59d73e6356a-cbc9d74da94932965bb73e242cd355fb1255cdfelang=plds=AVGcoid=avgtbavgcmpid=pr=frd=2014-03-01 15:10:48v=18.1.0.447pid=safeguardsg=sap=hp", "hxxp://mysearch.avg.com?cid={104F9C0B-09DC-4005-9DA2-8955B205E087}mid=8b711cea911147d29befa59d73e6356a-cbc9d74da94932965bb73e242cd355fb1255cdfelang=plds=AVGcoid=avgtbavgcmpid=pr=frd=2014-03-01 15:10:48v=18.1.5.516pid=safeguardsg=sap=hp", "hxxp://mysearch.avg.com?cid={104F9C0B-09DC-4005-9DA2-8955B205E087}mid=8b711cea911147d29befa59d73e6356a-cbc9d74da94932965bb73e242cd355fb1255cdfelang=plds=AVGcoid=avgtbavgcmpid=pr=frd=2014-03-01 15:10:48v=18.1.7.601pid=safeguardsg=sap=hp", "hxxp://mysearch.avg.com?cid={104F9C0B-09DC-4005-9DA2-8955B205E087}mid=8b711cea911147d29befa59d73e6356a-cbc9d74da94932965bb73e242cd355fb1255cdfelang=plds=AVGcoid=avgtbavgcmpid=pr=frd=2014-03-01 15:10:48v=18.1.9.786pid=safeguardsg=sap=hp", "hxxp://mysearch.avg.com?cid={104F9C0B-09DC-4005-9DA2-8955B205E087}mid=8b711cea911147d29befa59d73e6356a-cbc9d74da94932965bb73e242cd355fb1255cdfelang=plds=AVGcoid=avgtbavgcmpid=pr=frd=2014-03-01 15:10:48v=18.1.9.799pid=safeguardsg=sap=hp", "https://mysearch.avg.com?cid={104F9C0B-09DC-4005-9DA2-8955B205E087}mid=8b711cea911147d29befa59d73e6356a-cbc9d74da94932965bb73e242cd355fb1255cdfelang=plds=AVGcoid=avgtbavgcmpid=pr=frd=2014-03-01 15:10:48v=18.1.9.799pid=safeguardsg=sap=hp"
CHR DefaultSuggestURL: Default - {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}gs_ri={google:suggestRid}xssi=tq={searchTerms}{google:inputType}{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}{google:searchVersion}{google:sessionToken}{google:prefetchQuery}sugkey={google:suggestAPIKeyParameter}
CHR Extension: (No Name) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\iljnkagajgfdmfnnidjijobijlfjfgnb [2014-05-29]
CHR HKLM-x32\...\Chrome\Extension: [cfdkkghemjaackpnodiacedfadojaboh] - C:\Users\User\AppData\Local\Temp\whoislive.crx [2014-06-02]
CHR HKLM-x32\...\Chrome\Extension: [fdjkhamgopgokjmllcmpkiijndjeidcl] - C:\Users\User\AppData\Local\Temp\twsfiles\trustedshopper.crx [Not Found]
R2 vToolbarUpdater18.3.0; C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.3.0\ToolbarUpdater.exe [1802776 2015-03-05] (AVG Secure Search)
2015-05-04 20:45 - 2015-05-05 11:30 - 00000000 ____ D () C:\Program Files (x86)\SalePlUus
2015-05-04 20:45 - 2015-05-04 20:45 - 00000000 ____ D () C:\ProgramData\3810416132800770967
2015-05-04 20:44 - 2015-05-05 20:44 - 00000416 _____ () C:\Windows\Tasks\Bidaily Synchronize Task.job
2015-05-04 20:44 - 2015-05-04 20:44 - 00003326 _____ () C:\Windows\System32\Tasks\Bidaily Synchronize Task
2015-05-04 20:44 - 2015-05-04 20:44 - 00000000 ____ D () C:\ProgramData\aohkkchphdhfchodgncmfbhfkjjkcaio
EmptyTemp:

Plik zapisz pod nazwą fixlist.txt i umieść obok FRST w tym samym folderze.

Odinstaluj Chrome zaznaczając usunięcie danych przeglądania.


(Love131) #5

Wszystko zrobione, dzięki wielkie za pomoc. :slight_smile:


(Acorus) #6

Skasuj folder C:\FRST