Włączające się reklamy

locoos · 13 Maj 2014 10:22

Witam,

mam problem z ciągle włączającymi się reklamami w nowych oknach.

Raporty z OTL:

OTL.txt http://www.wklej.org/id/1360239/

Extras.txt http://www.wklej.org/id/1360233/

Bardzo proszę o pomoc.

Atis · 13 Maj 2014 10:42

W panelu sterowania odinstaluj:

FindRight

Qtrax Player

Update for Zip Opener

Qtrax Connection Manager

Zip Opener Packages

Pobierz i uruchom AdwCleaner Kliknij Szukaj i później Usuń.

Pobierz Farbar Recovery Scan Tool 64-Bit Version

Uruchom FRST i kliknij Scan. Pokaż raport FRST i Addition.

locoos · 13 Maj 2014 14:13

Raport FRST http://www.wklej.org/id/1360491/

Addition http://www.wklej.org/id/1360495/

Atis · 13 Maj 2014 14:28

Wklej do systemowego notatnika i zapisz jako plik tekstowy o nazwie fixlist :

HKLM-x32\...\Run: [tuto4pc_pl_6] => [X]
HKU\S-1-5-21-4065432701-1145508922-676924108-1000\...\RunOnce: [kinaipmdbjhapbamplbbajkoembeocpc Upgrader] - C:\Users\Grażyna\AppData\Local\Temp\kinE17D.tmp\UPDATER.EXE [254024 2014-01-30] (Mindspark Interactive Network)
Startup: C:\Users\Grażyna\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Facebook Messenger.lnk
ShortcutTarget: Facebook Messenger.lnk -> C:\Users\Grażyna\AppData\Local\Facebook\Messenger\2.1.4814.0\FacebookMessenger.exe (No File)
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKCU - {DA2C25B1-C93C-443B-B666-E265774B9A0E} URL = http://websearch.ask.com/redirect?client=ie&tb=ORJ&o=100000027&src=crm&q={searchTerms}&locale=en_US&apn_ptnrs=^U3&apn_dtid=^OSJ000^YY^PL&apn_uid=D7587CE6-B81F-466E-8682-07CF53A42BBC&apn_sauid=298E23D0-7158-4BC9-83A0-9ED0AACB8C21
Toolbar: HKCU - No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No File
FF SearchPlugin: C:\Users\Grażyna\AppData\Roaming\Mozilla\Firefox\Profiles\wp78m7pe.default\searchplugins\utorrentcontrolv2-customized-web-search.xml
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
U3 BcmSqlStartupSvc; 
U2 IviRegMgr; 
S1 ocroswnm; \??\C:\windows\system32\drivers\ocroswnm.sys [X]
U2 RichVideo; 
U3 SQLWriter; 
C:\AdwCleaner
C:\Users\Grażyna\Downloads\yet_another_cleaner_mat.exe
C:\Users\Grażyna\AppData\Local\Temp\*.dll
C:\Users\Grażyna\AppData\Local\Temp\*.exe
Task: {04C84CCE-F832-44D4-9BA7-FFFBED98E3B1} - \Digital Sites No Task File <==== ATTENTION
Task: {114EFEEF-600F-4AAA-AC68-D6F0BE944FC5} - System32\Tasks\AVG-Secure-Search-Update_JUNE2013_HP_rmv => C:\windows\TEMP\{91A93190-0CF3-4EC3-A2EA-ADEF45EFCA72}.exe
Task: {13A39B32-5B26-4B3A-B214-07F3C970E5EB} - \AdobeFlashPlayerUpdate No Task File <==== ATTENTION
Task: {928893F8-648C-41F2-BF24-9B3C5B32704E} - System32\Tasks\AVG-Secure-Search-Update_JUNE2013_TB_rmv => C:\windows\TEMP\{5A213F1E-D3FA-4886-9E40-0F230167F378}.exe
Task: {9CA0A2A0-8312-423C-8209-EA0FDE9B3AE1} - \BitGuard No Task File <==== ATTENTION
Task: {B86169D1-06D7-4473-89C0-A6021B8D123E} - \DSite No Task File <==== ATTENTION
Task: {D629B0AB-4CC5-4D5F-B847-25E704559A84} - \AdobeFlashPlayerUpdate 2 No Task File <==== ATTENTION
Task: C:\windows\Tasks\AVG-Secure-Search-Update_JUNE2013_HP_rmv.job => C:\windows\TEMP\{91A93190-0CF3-4EC3-A2EA-ADEF45EFCA72}.exe
Task: C:\windows\Tasks\AVG-Secure-Search-Update_JUNE2013_TB_rmv.job => C:\windows\TEMP\{5A213F1E-D3FA-4886-9E40-0F230167F378}.exe
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcmscsvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcmscsvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MCODS => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MpfService => ""="Service"

Uruchom FRST i kliknij Fix. Pokaż raport z usuwania Fixlog.

Kliknij Scan i pokaż nowy raport z FRST bez Addition.