Kiedy uruchamiam Google Chrome to zamiast chrome uruchamia mi się Firefox a na głównej surfvox.com nie mogę nic uruchomić piszę z laptopa bo na pc mam tego wirusa. Zainstalowałe FRST i dodałem wszystkie pliki Shortcut, FRST i Addition. Proszę o szybką pomoc. Przepraszam za późne odp. ale jadę do szpitala.
Otwórz Notatnik i wklej:
HKU\S-1-5-21-960244379-749337272-2414113717-1000\...\Run: [nvxasync] = C:\Users\Jacek\AppData\Roaming\nvxasync\nvxasync.exe [142679040 2014-12-07] ()
HKU\S-1-5-21-960244379-749337272-2414113717-1000\...\Winlogon: [Shell] C:\ProgramData\nvxasync\cvxasync.exe [142679040 2014-12-07] () ==== ATTENTION
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2503} URL = http://www.default-search.net/search?sid=503aid=112itype=nver=13986tm=531src=dsp={searchTerms}
SearchScopes: HKLM-x32 - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2503} URL = http://www.default-search.net/search?sid=503aid=112itype=nver=13986tm=531src=dsp={searchTerms}
SearchScopes: HKU\S-1-5-21-960244379-749337272-2414113717-1000 - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2503} URL = http://www.default-search.net/search?sid=503aid=112itype=nver=13986tm=531src=dsp={searchTerms}
CHR Extension: (EnterDigital) - C:\Users\Jacek\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbicpopjaaipnhconhlfmbkjbcfdhkkl [2014-12-03]
R2 MaintainerSvc6.37.565328; C:\ProgramData\7bb6df21-8ca8-4eec-965d-8cd2261544c7\maintainer.exe [123632 2014-12-07] ()
R1 {16fd1cfd-5f7d-4fb7-ac6e-55eec1f56bf3}Gw64; C:\Windows\System32\drivers\{16fd1cfd-5f7d-4fb7-ac6e-55eec1f56bf3}Gw64.sys [48784 2014-11-11] (StdLib)
R1 {60fb1691-e7e8-4d48-b26c-c3f85822f710}Gw64; C:\Windows\System32\drivers\{60fb1691-e7e8-4d48-b26c-c3f85822f710}Gw64.sys [48784 2014-11-03] (StdLib)
R1 {70ed362e-6c2f-4f13-9f05-a5b35ff4be55}Gw64; C:\Windows\System32\drivers\{70ed362e-6c2f-4f13-9f05-a5b35ff4be55}Gw64.sys [48784 2014-11-30] (StdLib)
R1 {8ca7f150-5454-4b4c-9537-1b831c71d329}Gw64; C:\Windows\System32\drivers\{8ca7f150-5454-4b4c-9537-1b831c71d329}Gw64.sys [48784 2014-11-17] (StdLib)
R1 {9015bae7-cdbb-4473-a5d0-ecfa559b2ca5}Gw64; C:\Windows\System32\drivers\{9015bae7-cdbb-4473-a5d0-ecfa559b2ca5}Gw64.sys [48784 2014-11-05] (StdLib)
R1 {93feeb25-9f23-4de1-b697-6a2c12816bac}Gw64; C:\Windows\System32\drivers\{93feeb25-9f23-4de1-b697-6a2c12816bac}Gw64.sys [48784 2014-11-23] (StdLib)
R1 {b28b16f8-524c-4f96-b046-1c8f12a5fe03}Gw64; C:\Windows\System32\drivers\{b28b16f8-524c-4f96-b046-1c8f12a5fe03}Gw64.sys [48784 2014-11-15] (StdLib)
R1 {bf07813e-aac8-4cea-bf69-7178c16076ac}Gw64; C:\Windows\System32\drivers\{bf07813e-aac8-4cea-bf69-7178c16076ac}Gw64.sys [48784 2014-11-21] (StdLib)
R1 {cb0b6f3d-aa8b-4a68-acf6-6ff30e1d0243}Gw64; C:\Windows\System32\drivers\{cb0b6f3d-aa8b-4a68-acf6-6ff30e1d0243}Gw64.sys [48784 2014-11-27] (StdLib)
R1 {dbe9acb7-ca74-4c18-ad13-f0270d74c42d}Gw64; C:\Windows\System32\drivers\{dbe9acb7-ca74-4c18-ad13-f0270d74c42d}Gw64.sys [48784 2014-11-09] (StdLib)
R1 {ea73a685-645b-47a8-a8f5-2538cc24ab81}Gw64; C:\Windows\System32\drivers\{ea73a685-645b-47a8-a8f5-2538cc24ab81}Gw64.sys [48784 2014-11-29] (StdLib)
R1 {f0aab91b-f97e-4d3d-b745-53663865729c}Gw64; C:\Windows\System32\drivers\{f0aab91b-f97e-4d3d-b745-53663865729c}Gw64.sys [48784 2014-11-28] (StdLib)
R1 {f1d7e225-e39d-4bcb-8a90-eaa4181b222b}Gw64; C:\Windows\System32\drivers\{f1d7e225-e39d-4bcb-8a90-eaa4181b222b}Gw64.sys [48784 2014-11-01] (StdLib)
S3 EagleX64; \\C:\Windows\system32\drivers\EagleX64.sys [X]
2014-12-07 09:09 - 2014-12-07 09:09 - 00000000 _RSHD () C:\Users\Jacek\AppData\Roaming\nvxasync
2014-12-07 09:09 - 2014-12-07 09:09 - 00000000 _RSHD () C:\ProgramData\nvxasync
2014-11-08 09:12 - 2014-11-08 09:12 - 00003004 _____ () C:\Windows\System32\Tasks\{C5224E73-D2A7-49B8-8F6D-C0E44F532A93}
EmptyTemp:
Plik zapisz pod nazwą fixlist.txt i umieść obok FRST w tym samym folderze.
Ale chyba coś znalazłem
Pokaż nowy log z FRST bez Addition.
Masz pokazać nowy log z FRST.
Otwórz Notatnik i wklej:
HKU\S-1-5-21-960244379-749337272-2414113717-1000\...\MountPoints2: {6dc63178-5d30-11e4-a3a1-e03f497ff6ca} - F:\autorun.exe [open][1] "Need for Speed Underground 2.exe"
GroupPolicy: Group Policy on Chrome detected ======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction ======= ATTENTION
HKU\S-1-5-21-960244379-749337272-2414113717-1000\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.surfvox.com/
2014-12-07 15:23 - 2014-12-07 15:23 - 00003150 _____ () C:\Windows\System32\Tasks\{3B9FB09B-7660-4990-997E-2558D5F88FD3}
2014-12-07 12:44 - 2014-12-07 12:45 - 00000000 ____ D () C:\AdwCleaner
2014-11-30 22:26 - 2014-11-30 12:51 - 00048784 _____ (StdLib) C:\Windows\system32\Drivers\{70ed362e-6c2f-4f13-9f05-a5b35ff4be55}Gw64.sys
2014-11-30 16:38 - 2014-11-29 23:50 - 00048784 _____ (StdLib) C:\Windows\system32\Drivers\{ea73a685-645b-47a8-a8f5-2538cc24ab81}Gw64.sys
2014-11-29 15:17 - 2014-11-28 21:55 - 00048784 _____ (StdLib) C:\Windows\system32\Drivers\{f0aab91b-f97e-4d3d-b745-53663865729c}Gw64.sys
2014-11-27 14:56 - 2014-11-27 00:05 - 00048784 _____ (StdLib) C:\Windows\system32\Drivers\{cb0b6f3d-aa8b-4a68-acf6-6ff30e1d0243}Gw64.sys
2014-11-24 15:49 - 2014-11-23 23:24 - 00048784 _____ (StdLib) C:\Windows\system32\Drivers\{93feeb25-9f23-4de1-b697-6a2c12816bac}Gw64.sys
2014-11-21 21:13 - 2014-11-21 06:23 - 00048784 _____ (StdLib) C:\Windows\system32\Drivers\{bf07813e-aac8-4cea-bf69-7178c16076ac}Gw64.sys
2014-11-20 18:46 - 2014-11-20 18:46 - 00002998 _____ () C:\Windows\System32\Tasks\{7A46F89E-C296-4F19-9AB1-62385A1093D0}
2014-11-18 15:37 - 2014-11-17 22:29 - 00048784 _____ (StdLib) C:\Windows\system32\Drivers\{8ca7f150-5454-4b4c-9537-1b831c71d329}Gw64.sys
2014-11-16 09:10 - 2014-11-15 18:31 - 00048784 _____ (StdLib) C:\Windows\system32\Drivers\{b28b16f8-524c-4f96-b046-1c8f12a5fe03}Gw64.sys
2014-11-12 14:07 - 2014-11-11 22:25 - 00048784 _____ (StdLib) C:\Windows\system32\Drivers\{16fd1cfd-5f7d-4fb7-ac6e-55eec1f56bf3}Gw64.sys
2014-11-09 17:28 - 2014-11-09 05:26 - 00048784 _____ (StdLib) C:\Windows\system32\Drivers\{dbe9acb7-ca74-4c18-ad13-f0270d74c42d}Gw64.sys
Plik zapisz pod nazwą fixlist.txt i umieść obok FRST w tym samym folderze.
Zrobiłem wszystko co napisałeś. JESTEŚ WIELKI/A :D!! DZIĘKUJĘ wszystko działa baaaardzo dobrze 
jeszcze raz DZIĘKUJĘ