FRST
Addiction
o to logi, proszę o pomoc.
Odinstaluj YAC(Yet Another Cleaner!).Otwórz notatnik systemowy i wklej:
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk
ShortcutTarget: McAfee Security Scan Plus.lnk - C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe (McAfee, Inc.)
ShellIconOverlayIdentifiers: [00avast] - {472083B0-C522-11CF-8763-00608CC02F24} = No File
GroupPolicy: Group Policy on Chrome detected ======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction ======= ATTENTION
SearchScopes: HKU\.DEFAULT - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO-x32: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.8.150\McAfeeMSS_IE.dll (McAfee, Inc.)
BHO-x32: Strong Signal - {c723a437-2eaf-466d-a95b-3fa0966bf88c} - C:\Program Files (x86)\Strong Signal\Extensions\c723a437-2eaf-466d-a95b-3fa0966bf88c.dll No File
FF Extension: Strong Signal - C:\Users\Mistrz\AppData\Roaming\Mozilla\Firefox\Profiles\18vg6gx9.default\Extensions\{d53d402a-1b39-4020-8066-3e40f3b55121}.xpi [2015-02-25]
FF HKU\S-1-5-21-3031853187-3803846155-1030544975-1000\...\Firefox\Extensions: [{e4f94d1e-2f53-401e-8885-681602c0ddd8}] - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi
FF Extension: No Name - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi [2014-04-04]
FF Extension: No Name - C:\Users\Mistrz\AppData\Roaming\Mozilla\Firefox\Profiles\18vg6gx9.default\extensions\faststartff@gmail.com [Not Found]
CHR Extension: (Strong Signal) - C:\Users\Mistrz\AppData\Local\Google\Chrome\User Data\Default\Extensions\bcdmgnpdjibgflhdpdiadieiellikmge [2015-02-26]
R2 iSafeService; C:\Program Files (x86)\Elex-tech\YAC\iSafeSvc.exe [120128 2015-01-19] (Elex do Brasil Participações Ltda)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.150\McCHSvc.exe [289256 2014-04-09] (McAfee, Inc.)
R1 iSafeKrnl; C:\Program Files (x86)\Elex-tech\YAC\iSafeKrnl.sys [249000 2015-01-19] (Elex do Brasil Participações Ltda)
S3 iSafeKrnlBoot; C:\Windows\System32\DRIVERS\iSafeKrnlBoot.sys [45224 2015-01-19] (Elex do Brasil Participações Ltda)
R1 iSafeKrnlKit; C:\Program Files (x86)\Elex-tech\YAC\iSafeKrnlKit.sys [99496 2015-01-19] (Elex do Brasil Participações Ltda)
R1 iSafeKrnlMon; C:\Program Files (x86)\Elex-tech\YAC\iSafeKrnlMon.sys [42152 2015-01-19] (Elex do Brasil Participações Ltda)
R1 iSafeKrnlR3; C:\Program Files (x86)\Elex-tech\YAC\iSafeKrnlR3.sys [93352 2015-01-19] (Elex do Brasil Participações Ltda)
R1 iSafeNetFilter; C:\Windows\System32\DRIVERS\iSafeNetFilter.sys [52392 2015-01-03] (Elex do Brasil Participações Ltda)
U3 a52gs2th; C:\Windows\System32\Drivers\a52gs2th.sys [0] (Advanced Micro Devices) ==== ATTENTION (zero size file/folder)
U3 afzwee9s; C:\Windows\System32\Drivers\afzwee9s.sys [0] (Advanced Micro Devices) ==== ATTENTION (zero size file/folder)
S3 VGPU; System32\drivers\rdvgkmd.sys [X]
2015-02-26 14:00 - 2015-02-26 14:00 - 00001906 _____ () C:\Users\Public\Desktop\YAC.lnk
2015-02-26 14:00 - 2015-02-26 14:00 - 00000000 ____ D () C:\Windows\system32\log
2015-02-26 14:00 - 2015-02-26 14:00 - 00000000 ____ D () C:\Users\Mistrz\AppData\Roaming\Elex-tech
2015-02-26 14:00 - 2015-02-26 14:00 - 00000000 ____ D () C:\Users\Mistrz\AppData\Roaming\eCyber
2015-02-26 14:00 - 2015-02-26 14:00 - 00000000 ____ D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\YAC
2015-02-26 14:00 - 2015-02-26 14:00 - 00000000 ____ D () C:\Program Files (x86)\Elex-tech
2015-02-26 14:00 - 2015-01-19 12:04 - 00045224 _____ (Elex do Brasil Participações Ltda) C:\Windows\system32\Drivers\iSafeKrnlBoot.sys
2015-02-26 14:00 - 2015-01-03 09:57 - 00052392 _____ (Elex do Brasil Participações Ltda) C:\Windows\system32\Drivers\iSafeNetFilter.sys
2015-02-26 13:59 - 2015-02-26 14:00 - 01123984 _____ (Elex do Brasil Participações Ltda) C:\Users\Mistrz\Downloads\yet_another_cleaner_sk (2).exe
2015-02-26 13:59 - 2015-02-26 13:59 - 01123984 _____ (Elex do Brasil Participações Ltda) C:\Users\Mistrz\Downloads\yet_another_cleaner_sk.exe
2015-02-26 13:59 - 2015-02-26 13:59 - 01123984 _____ (Elex do Brasil Participações Ltda) C:\Users\Mistrz\Downloads\yet_another_cleaner_sk (1).exe
2015-02-26 13:53 - 2014-10-23 19:26 - 00000000 ____ D () C:\AdwCleaner
EmptyTemp:
Plik zapisz pod nazwą fixlist.txt i umieść obok FRST w tym samym folderze.
wszystkiego dobrego w życiu Ci życzę, szczęścia i żebyś trafiał w przyszłości na dobrych ludzi!! pozdrawiam, działa wszystko
Skasuj folder C:\FRST