Bardzo proszę o pomoc. Od kilku dni walczę. wrzucam pliki z FRST.
Nie wiesz o tym, że nie należy instalować jednocześnie kilku programów antywirusowych?
Zostaw tylko jeden program, a pozostałe odinstaluj.
Usuń szkodliwe rozszerzenia w przeglądarce Firefox
Opera w pasek adresu wpisz: opera:extensions
W panelu sterowania odinstaluj:
GeekBuddy
McAfee Security Scan Plus
SpyHunter 4
Wklej do systemowego notatnika i zapisz jako plik tekstowy o nazwie fixlist :
CloseProcesses:
HKLM\...\Policies\Explorer: [NoFolderOptions] 0
HKLM\...\Policies\Explorer: [NoControlPanel] 0
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page =
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page =
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-2071517028-940561355-372299274-1001 -> {8EEAC88A-079B-4b2c-80C1-7836F79EB40A} URL =
FF SelectedSearchEngine: Yahoo
FF Homepage: hxxp://pl.yahoo.com?fr=fp-comodo
FF Keyword.URL: hxxp://pl.search.yahoo.com/search?fr=ytff-comodo&p=
FF Extension: Strong Signal - C:\Users\paulina\AppData\Roaming\Mozilla\Firefox\Profiles\aqjldej8.default\Extensions\{d53d402a-1b39-4020-8066-3e40f3b55121}.xpi [2015-02-25]
FF Extension: McAfee Security Scan Plus - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi [2014-04-04]
CHR HKLM\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif] - https://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif] - https://clients2.google.com/service/update2/crx
OPR Extension: (Strong Signal) - C:\Users\paulina\AppData\Roaming\Opera Software\Opera Stable\Extensions\bcdmgnpdjibgflhdpdiadieiellikmge [2015-05-01]
S2 0072551429778205mcinstcleanup; C:\WINDOWS\TEMP\007255~1.EXE -cleanup -nolog [X]
R2 SpyHunter 4 Service; C:\Program Files\Enigma Software Group\SpyHunter\SH4Service.exe [1026432 2015-05-02] (Enigma Software Group USA, LLC.)
R3 esgiguard; C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [15920 2015-05-02] (Enigma Software Group USA, LLC.)
2015-05-02 11:48 - 2015-05-04 15:20 - 00000000 ____ D () C:\AdwCleaner
2015-05-02 10:55 - 2015-05-02 10:55 - 00022704 _____ () C:\WINDOWS\system32\Drivers\EsgScanner.sys
2015-05-02 10:54 - 2015-05-02 10:54 - 03109248 _____ (Enigma Software Group USA, LLC.) C:\Users\paulina\Downloads\SpyHunter-Installer (1).exe
2014-09-01 10:18 - 2014-09-01 10:18 - 0001248 _____ () C:\Users\paulina\AppData\Roaming\YSISC
2015-01-05 16:23 - 2015-05-04 17:35 - 0199732 _____ () C:\Users\paulina\AppData\Local\BTServer.log
2015-05-02 10:56 - 2015-01-08 12:46 - 00001114 _____ () C:\Users\paulina\Desktop\SpyHunter.lnk
2015-05-02 10:55 - 2015-01-08 12:45 - 00000000 ____ D () C:\Program Files\Enigma Software Group
Task: {245A42F6-879B-485B-A4DF-51C166A2143B} - System32\Tasks\{466148F4-DBA0-4E45-975D-5F118B995F0E} => pcalua.exe -a C:\Users\paulina\AppData\Roaming\mystartsearch\UninstallManager.exe -c -ptid=smt
AlternateDataStreams: C:\ProgramData\Temp:56E2E879
AlternateDataStreams: C:\Windows:0DE8577BE6C468EB
EmptyTemp:
Uruchom FRST i kliknij Fix. Pokaż raport z usuwania Fixlog.
Kliknij Scan i pokaż nowy raport z FRST bez Addition i Shortcut.
Przecież nadal masz dwa programy antywirusowe, 360Total Security i McAfee.