Kiedy korzystam z laptopa, same z siebie włączają się reklamy.
OTL:
Użyj AdwCleaner http://www.bleepingcomputer.com/download/adwcleaner/ z funkcji Skan(Szukaj) a następnie Clean(usuń) (w przypadku Visty/Windows7 uruchom z prawokliku jako Administrator).
Pobierz Farbar Recovery Scan Tool http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/ zgodny z wersją systemu 32-bit lub 64-bit.
Otwórz Notatnik i wklej:
Task: {19D8661B-ECE1-43D6-89C9-B685280CE7D0} - \PC Performer_DEFAULT No Task File ==== ATTENTION
Task: {1BA19C98-7A60-41A7-8D5F-CD16D0512E98} - \AmiUpdXp No Task File ==== ATTENTION
Task: {2325AEA1-BFD1-4A93-88F0-0123634177C1} - \BonanzaDealsUpdate No Task File ==== ATTENTION
Task: {307FD35A-A109-4C2B-8808-BDBA72D16410} - \BonanzaDealsLiveUpdateTaskMachineUA No Task File ==== ATTENTION
Task: {54AD67EF-7BEA-4450-B151-6E89E14295AC} - \MySearchDial No Task File ==== ATTENTION
Task: {6658A75F-441B-47E7-9A2A-E02438019ABA} - \PC Performer No Task File ==== ATTENTION
Task: {75E149A6-BE92-482C-941D-64A887E6847C} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-1007770188-1294028281-273212745-1000UA = C:\Users\Kamil\AppData\Local\Facebook\Update\FacebookUpdate.exe [2014-04-10] (Facebook Inc.)
Task: {838A1F94-3FE3-4E98-9E46-2A62BC92470B} - \Easy Deals-codedownloader No Task File ==== ATTENTION
Task: {89934527-896F-4132-99A3-42131275FDFF} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-1007770188-1294028281-273212745-1000Core = C:\Users\Kamil\AppData\Local\Facebook\Update\FacebookUpdate.exe [2014-04-10] (Facebook Inc.)
Task: {916C1BE9-4E2B-4021-B598-489FC9ACC259} - \PC Performer_UPDATES No Task File ==== ATTENTION
Task: {A2C38408-2BD3-4C8C-9780-95C90D240999} - \BonanzaDealsLiveUpdateTaskMachineCore No Task File ==== ATTENTION
Task: {A32FB365-D51A-4FBC-B5FD-629F6D566891} - \Easy Deals-updater No Task File ==== ATTENTION
Task: {BBD66AC4-DF96-42D8-9B8E-1C0C12E4B0A8} - \DealPlyLiveUpdateTaskMachineCore No Task File ==== ATTENTION
Task: {C890D553-8958-4F30-9229-37FFFC7EC404} - \Easy Deals-enabler No Task File ==== ATTENTION
Task: {F3A3B76C-2143-455D-B6F1-05468F3D281B} - \RegClean Pro No Task File ==== ATTENTION
Task: {F4B1E018-F4AF-48DF-AC43-BF2E58EC0C5F} - \Easy Deals-firefoxinstaller No Task File ==== ATTENTION
Task: {F5DA869C-66C1-4C9C-A09D-92D036808F03} - \DealPlyLiveUpdateTaskMachineUA No Task File ==== ATTENTION
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1007770188-1294028281-273212745-1000Core.job = C:\Users\Kamil\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1007770188-1294028281-273212745-1000UA.job = C:\Users\Kamil\AppData\Local\Facebook\Update\FacebookUpdate.exe
HKU\S-1-5-21-1007770188-1294028281-273212745-1000\...\Run: [lollipop_08100609] = "c:\users\kamil\appdata\local\lollipop\lollipop_08100609.exe" lollipop_08100609
HKU\S-1-5-21-1007770188-1294028281-273212745-1000\...\Run: [Facebook Update] = C:\Users\Kamil\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2014-04-10] (Facebook Inc.)
Startup: C:\Users\Kamil\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\5cd8f17f4086744065eb0992a09e05a2.exe ()
GroupPolicy: Group Policy on Chrome detected ======= ATTENTION
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL =
BHO: YTAdRoEmoval - {CDA9434B-6FA2-2529-92A8-C5DD771BAD6E} - C:\ProgramData\YTAdRoEmoval\y7UR.x64.dll ()
BHO-x32: TubeItAdBLoockFr - {84F62C50-01E1-772C-225E-1529CC854E11} - C:\ProgramData\TubeItAdBLoockFr\4dmDG7IzX.dll ()
BHO-x32: Media View - {b0439f5e-5fed-4240-939c-79aeb721cb52} - C:\Program Files (x86)\MediaViewV1\MediaViewV1alpha4907\ie\MediaViewV1alpha4907.dll No File
BHO-x32: YTAdRoEmoval - {CDA9434B-6FA2-2529-92A8-C5DD771BAD6E} - C:\ProgramData\YTAdRoEmoval\y7UR.dll ()
Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File
FF HKLM-x32\...\Firefox\Extensions: [ext@MediaViewV1alpha6451.net] - C:\Program Files (x86)\MediaViewV1\MediaViewV1alpha6451\ff
FF HKLM-x32\...\Firefox\Extensions: [ext@MediaViewV1alpha4907.net] - C:\Program Files (x86)\MediaViewV1\MediaViewV1alpha4907\ff
FF HKLM-x32\...\Firefox\Extensions: [ext@MediaWatchV1home243.net] - C:\Program Files (x86)\MediaWatchV1\MediaWatchV1home243\ff
CHR Extension: (YTAdRoEmoval) - C:\Users\Kamil\AppData\Local\Google\Chrome\User Data\Default\Extensions\hdhphaijeekhdpgjcjoekfppghponoob [2014-02-08]
CHR HKLM-x32\...\Chrome\Extension: [agigjfkoaonoejhdlepiojconljhhpgk] - C:\Program Files (x86)\MediaViewV1\MediaViewV1alpha4907\ch\MediaViewV1alpha4907.crx [2013-10-31]
CHR HKLM-x32\...\Chrome\Extension: [bmhbohccmmnofhppknlbkcabdnaonafb] - C:\Program Files (x86)\MediaViewV1\MediaViewV1alpha6451\ch\MediaViewV1alpha6451.crx [2013-10-31]
CHR HKLM-x32\...\Chrome\Extension: [jpmnggadncndmmopjlikkmbcnnlglnmd] - C:\Program Files (x86)\MediaWatchV1\MediaWatchV1home243\ch\MediaWatchV1home243.crx [2013-10-31]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction ======= ATTENTION
S3 BRDriver64; \\C:\ProgramData\BitRaider\BRDriver64.sys [X]
S3 esgiguard; \\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [X]
S3 FairplayKD; \\C:\ProgramData\MTA San Andreas All\Common\temp\FairplayKD.sys [X]
2014-05-13 16:37 - 2014-05-13 16:44 - 00000000 ____ D () C:\AdwCleaner
Plik zapisz pod nazwą fixlist.txt i umieść obok FRST