Uruchom OTL i w okno (Własne opcje skanowania/Script)wklej:
:OTL
SRV - [2013-12-27 16:46:43 | 000,146,920 | ---- | M] (SaveSense) [On_Demand | Stopped] -- C:\Program Files (x86)\SaveSenseLive\Update\SaveSenseLive.exe -- (savesenselivem)
SRV - [2013-12-27 16:46:43 | 000,146,920 | ---- | M] (SaveSense) [Auto | Stopped] -- C:\Program Files (x86)\SaveSenseLive\Update\SaveSenseLive.exe -- (savesenselive)
[2014-01-10 10:53:28 | 000,000,000 | ---D | M] ("iWebar") -- C:\Users\Paulina\AppData\Roaming\mozilla\Firefox\Profiles\7vx0wujk.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com
CHR - Extension: iWebar = C:\Users\Paulina\AppData\Local\Google\Chrome\User Data\Default\Extensions\cigiagpbkapepgklncnajbakkpkopmam\1.26.207_0\crossrider
CHR - Extension: iWebar = C:\Users\Paulina\AppData\Local\Google\Chrome\User Data\Default\Extensions\cigiagpbkapepgklncnajbakkpkopmam\1.26.207_0\
O2:64bit: - BHO: (no name) - {A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C} - No CLSID value found.
O3:64bit: - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O4 - HKLM..\Run: [mobilegeni daemon] C:\Program Files (x86)\Mobogenie\DaemonProcess.exe File not found
O4 - HKU\S-1-5-21-10562091-3585113508-340761745-1002..\Run: [iLivid] "C:\Users\Paulina\AppData\Local\iLivid\iLivid.exe" -autorun File not found
O4 - HKU\S-1-5-21-10562091-3585113508-340761745-1002..\Run: [NextLive] C:\Users\Paulina\AppData\Roaming\newnext.me\nengine.dll (NewNextDotMe)
[2014-02-01 20:07:06 | 000,000,000 | ---D | C] -- C:\AdwCleaner
[2014-02-01 20:46:01 | 000,000,316 | ---- | M] () -- C:\WINDOWS\tasks\SaveSense.job
[2014-02-01 20:23:38 | 000,002,310 | ---- | M] () -- C:\WINDOWS\tasks\iWebar-firefoxinstaller.job
[2014-02-01 20:23:38 | 000,002,280 | ---- | M] () -- C:\WINDOWS\tasks\iWebar-chromeinstaller.job
[2014-02-01 20:23:38 | 000,001,444 | ---- | M] () -- C:\WINDOWS\tasks\iWebar-enabler.job
[2014-02-01 20:23:37 | 000,001,620 | ---- | M] () -- C:\WINDOWS\tasks\iWebar-updater.job
[2014-02-01 20:23:37 | 000,001,572 | ---- | M] () -- C:\WINDOWS\tasks\iWebar-codedownloader.job
[2014-02-01 20:25:24 | 000,000,000 | ---D | M] -- C:\Users\Paulina\AppData\Roaming\newnext.me
[2013-12-27 16:46:41 | 000,000,000 | ---D | M] -- C:\Users\Paulina\AppData\Roaming\SaveSense
:Commands
[emptytemp]
Kliknij Wykonaj skrypt.
Przeskanuj progr.Malwarebytes Anti-Malware http://www.malwarebytes.org/products/malwarebytes_free/