Witam,
bardzo proszę o pomoc w usunięciu tych złośliwych reklam…
Wklejam linki do raportów:
http://www.wklej.org/id/1707726/
http://www.wklej.org/id/1707728/
http://www.wklej.org/id/1707729/
Pozdrawiam serdecznie
Odinstaluj Akamai NetSession Interface.Otwórz notatnik systemowy i wklej:
HKLM\...\Run: [ASUS WebStorage] = C:\Program Files (x86)\ASUS\ASUS WebStorage\SERVICE\AsusWSService.exe
HKLM\...\Run: [AdobeAAMUpdater-1.0] = C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [478984 2012-12-15] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [RemoteControl9] = C:\Program Files (x86)\Cyberlink\PowerDVD9\PDVD9Serv.exe [87336 2009-07-07] (CyberLink Corp.)
HKLM-x32\...\Run: [UpdatePSTShortCut] = C:\Program Files (x86)\Cyberlink\DVD Suite\MUITransfer\MUIStartMenu.exe [210216 2010-06-25] (CyberLink Corp.)
HKLM-x32\...\Run: [UpdateLBPShortCut] = C:\Program Files (x86)\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe [222504 2009-05-20] (CyberLink Corp.)
HKLM-x32\...\Run: [UpdateP2GoShortCut] = C:\Program Files (x86)\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe [222504 2009-05-20] (CyberLink Corp.)
HKU\S-1-5-21-1420411819-1999552527-218117422-1000\...\Run: [Akamai NetSession Interface] = C:\Users\Asus\AppData\Local\Akamai\netsession_win.exe [4672920 2014-04-17] (Akamai Technologies, Inc.)
HKU\S-1-5-21-1420411819-1999552527-218117422-1000\...\Run: [AdobeBridge] = [X]
HKU\S-1-5-21-1420411819-1999552527-218117422-1000\...\Policies\Explorer: []
GroupPolicy: Group Policy on Chrome detected ======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction ======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://isearch.omiga-plus.com/web/?type=dsts=1420724605from=coruid=ST9640320AS_5WX2449JXXXX5WX2449Jq={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://isearch.omiga-plus.com/web/?type=dsts=1420724605from=coruid=ST9640320AS_5WX2449JXXXX5WX2449Jq={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://isearch.omiga-plus.com/web/?type=dsts=1420724605from=coruid=ST9640320AS_5WX2449JXXXX5WX2449Jq={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://isearch.omiga-plus.com/web/?type=dsts=1420724605from=coruid=ST9640320AS_5WX2449JXXXX5WX2449Jq={searchTerms}
HKU\S-1-5-21-1420411819-1999552527-218117422-1000\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.search.ask.com/?tpid=ORJ-SPEo=APN11406pf=V7trgb=IEp2=%5EBBE%5EOSJ000%5EYY%5EPLgct=hpapn_ptnrs=BBEapn_dtid=%5EOSJ000%5EYY%5EPLapn_dbr=ieapn_uid=13A200B9-E543-45B4-8C76-856FA435D067itbv=12.24.1.51doi=2015-04-03psv=pt=tb
SearchScopes: HKU\S-1-5-21-1420411819-1999552527-218117422-1000 - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-1420411819-1999552527-218117422-1000 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-1420411819-1999552527-218117422-1000 - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL =
SearchScopes: HKU\S-1-5-21-1420411819-1999552527-218117422-1000 - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL =
SearchScopes: HKU\S-1-5-21-1420411819-1999552527-218117422-1000 - {86D39A5D-72B4-4893-84D7-8AF905D8350E} URL = http://www.search.ask.com/web?tpid=ORJ-SPEo=APN11406pf=V7p2=^BBE^OSJ000^YY^PLgct=itbv=12.24.1.51apn_uid=13A200B9-E543-45B4-8C76-856FA435D067apn_ptnrs=BBEapn_dtid=^OSJ000^YY^PLapn_dbr=iedoi=2015-04-03trgb=IEq={searchTerms}psv=pt=tb
BHO-x32: Digital More - {c0b1016f-b7e5-46f0-b415-6bf9e55ab00d} - C:\Program Files (x86)\Digital More\Extensions\c0b1016f-b7e5-46f0-b415-6bf9e55ab00d.dll No File
BHO-x32: Strong Signal - {c723a437-2eaf-466d-a95b-3fa0966bf88c} - C:\Program Files (x86)\Strong Signal\Extensions\c723a437-2eaf-466d-a95b-3fa0966bf88c.dll No File
Toolbar: HKU\S-1-5-21-1420411819-1999552527-218117422-1000 - No Name - {4F524A2D-5350-4500-76A7-7A786E7484D7} - No File
FF Extension: Strong Signal - C:\Users\Asus\AppData\Roaming\Mozilla\Firefox\Profiles\cukivfoz.default\Extensions\{ba0a5460-68de-457f-b28e-a05c9f0b3e0e}.xpi [2015-03-19]
R1 {4cff408a-d9e7-47c3-a711-95133fcf7f45}Gw64; C:\Windows\System32\drivers\{4cff408a-d9e7-47c3-a711-95133fcf7f45}Gw64.sys [48792 2015-01-19] (StdLib)
R1 {693a0a5b-aa08-4a3c-b7e8-398a93e02cf2}Gw64; C:\Windows\System32\drivers\{693a0a5b-aa08-4a3c-b7e8-398a93e02cf2}Gw64.sys [48792 2015-01-13] (StdLib)
R1 {6e9af5d3-a8f9-4461-ad38-1433888f55dc}Gw64; C:\Windows\System32\drivers\{6e9af5d3-a8f9-4461-ad38-1433888f55dc}Gw64.sys [48792 2015-01-16] (StdLib)
R1 {76eaa25f-d535-414d-8a8b-4bce0a94d247}Gw64; C:\Windows\System32\drivers\{76eaa25f-d535-414d-8a8b-4bce0a94d247}Gw64.sys [48792 2015-01-10] (StdLib)
R1 {8d9c9462-4635-4cc0-ab2c-0e46af3a958b}Gw64; C:\Windows\System32\drivers\{8d9c9462-4635-4cc0-ab2c-0e46af3a958b}Gw64.sys [48792 2015-01-07] (StdLib)
U3 tmlwf; No ImagePath
U3 tmwfp; No ImagePath
EmptyTemp:
Plik zapisz pod nazwą fixlist.txt i umieść obok FRST w tym samym folderze.
Bardzo, bardzo DZIĘKUJĘ
Skasuj folder C:\FRST.