Witam
Dzisiaj na komputerze z nikąd pojawiło mi się jakiś syf.
VOPackage,Freesofttoday,Any protect… Udało mi się tego pozbyć przez AdwCleanera ale Windows Version Installer i ikonka Continue Live Installation.
OTL:http://pastebin.com/ThSVrGry
Extras: http://pastebin.com/8d8z694E
S3BA1
(S3BA_)
#2
Ja mogę podpowiedzieć żebyś jeszcze odinstalował BlockAndSurf zarówno z systemu jak i z chrome.
Atis
(Atis)
#3
Acorus
(Acorus)
#5
Odinstaluj BlockAndSurf,Search App by Ask,sweet-page uninstall.Otwórz Notatnik i wklej:
HKLM-x32\...\Run: [BlockAndSurf] = C:\Program Files (x86)\ver5BlockAndSurf\BlockAndSurf.exe [118272 2014-08-01] ()
GroupPolicy: Group Policy on Chrome detected ======= ATTENTION
BHO-x32: BlockAndSurf - {AEAD521D-4BE9-6B90-C390-302BB45A9402} - C:\Program Files (x86)\ver5BlockAndSurf\176.dll ()
FF HKCU\...\Firefox\Extensions: [{C8C336AC-B49E-5D60-02C8-6320C85D1196}] - C:\Program Files (x86)\ver5BlockAndSurf\176.xpi
FF Extension: BlockAndSurf - C:\Program Files (x86)\ver5BlockAndSurf\176.xpi [2014-08-01]
CHR Extension: (BlockAndSurf) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\nhkhjhdmnlijmmlpeiflhpdnpppjfkfc [2014-08-01]
CHR HKLM-x32\...\Chrome\Extension: [aaaaaiabcopkplhgaedhbloeejhhankf] - C:\ProgramData\AskPartnerNetwork\Toolbar\Shared\CRX\aaaaaiabcopkplhgaedhbloeejhhankf.crx [2014-07-19]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction ======= ATTENTION
S2 WindowsMangerProtect; C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe -service [X]
S3 MSICDSetup; \\E:\CDriver64.sys [X]
S3 NTIOLib_1_0_C; \\E:\NTIOLib_X64.sys [X]
2014-08-01 19:43 - 2014-08-01 19:51 - 00000000 ____ D () C:\AdwCleaner
2014-08-01 14:39 - 2014-08-01 14:39 - 00000000 ____ D () C:\Program Files (x86)\ver5BlockAndSurf
CMD: del /f /s /q %TEMP%\*.*
Plik zapisz pod nazwą fixlist.txt i umieść obok FRST w tym samym folderze.