Witam
W panelu sterowania odinstaluj McAfee SecurityCenter i McAfee WebAdvisor
Użyj McAfee Consumer Product Removal (MCPR)
Pobierz i uruchom AdwCleaner Kliknij Scan i później Cleaning.
Kliknij Scan i pokaż nowy raport z FRST bez Addition i Shortcut.
Wklej do systemowego notatnika i zapisz jako plik tekstowy o nazwie fixlist :
GroupPolicy: Ograniczenia - Chrome <======= UWAGA
CHR HKLM\SOFTWARE\Policies\Google: Ograniczenia <======= UWAGA
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Ograniczenia <======= UWAGA
HKU\S-1-5-21-3255480703-2583457874-546338845-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Ograniczenia <======= UWAGA
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.wp.pl/?src01=dp220150310
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = www.wp.pl/?src01=dp220150310
HKU\S-1-5-21-3255480703-2583457874-546338845-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.interia.pl/#utm_source=instalki1&utm_medium=installer&utm_campaign=instalki1&iwa_source=installer_instalki
URLSearchHook: HKU\S-1-5-21-3255480703-2583457874-546338845-1000 - (Brak nazwy) - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - Brak pliku
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
FF Homepage: hxxp://www.interia.pl/#utm_source=instalki1&utm_medium=installer&utm_campaign=instalki1&iwa_source=installer_instalki
FF Extension: McAfee WebAdvisor - C:\Users\Adrian\AppData\Roaming\Mozilla\Firefox\Profiles\xvyjtk8j.default\Extensions\{4ED1F68A-5463-4931-9384-8FFF5ED91D92}.xpi [2015-08-13]
CHR HomePage: Default -> hxxp://www.interia.pl/#utm_source=instalki1&utm_medium=installer&utm_campaign=instalki1&iwa_source=installer_instalki
CHR StartupUrls: Default -> "hxxp://www.interia.pl/#utm_source=instalki1&utm_medium=installer&utm_campaign=instalki1&iwa_source=installer_instalki"
S3 mfesapsn; Brak ImagePath
S3 ALSysIO; \??\C:\Users\ADMINI~1\AppData\Local\Temp\ALSysIO64.sys [X]
U3 BcmSqlStartupSvc; Brak ImagePath
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
U2 IviRegMgr; Brak ImagePath
U2 RichVideo; Brak ImagePath
U3 SQLWriter; Brak ImagePath
2015-09-15 12:12 - 2015-06-17 11:03 - 00000000 ____ D C:\AdwCleaner
Task: {7BCF6D29-D473-4398-BDF9-28315CA6B8E3} - System32\Tasks\SpyHunter4Startup => C:\Program Files (x86)\Enigma Software Group\SpyHunter\SpyHunter4.exe
Task: {BAF75D07-061D-4350-BC25-E40BDF7559BA} - System32\Tasks\{D782C46D-C2A1-4F51-8FFE-7578666F58A9} => pcalua.exe -a C:\Users\Adrian\Downloads\IN1CHP22WW1.exe -d C:\Users\Adrian\Downloads
Task: {CBF982A8-D77D-43F2-A6A1-FE5E78A973AA} - System32\Tasks\McQcTask => c:\Program Files (x86)\McAfee\MQC\QcConsol.exe [2009-09-25] (McAfee, Inc.)
Task: {CCD19482-05A6-4AEE-8B8C-CB61162E2AAF} - System32\Tasks\{99E746FD-D487-4B4B-A892-7A7268D7F001} => pcalua.exe -a C:\Users\Adrian\Downloads\IN2VDO30WW6.exe -d C:\Users\Adrian\Desktop
Task: {E4A82649-DB4A-4748-8C99-1002CA859D59} - System32\Tasks\McDefragTask => c:\Program Files (x86)\McAfee\MQC\QcConsol.exe [2009-09-25] (McAfee, Inc.)
Task: C:\windows\Tasks\McQcTask.job => c:\PROGRA~2\mcafee\mqc\QcConsol.exe
Task: C:\windows\Tasks\McDefragTask.job => c:\PROGRA~2\mcafee\mqc\QcConsol.exe C:\windows\system32\defrag.exe
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcmscsvc => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcmscsvc => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MCODS => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MpfService => ""="Service"
EmptyTemp:
Uruchom FRST i kliknij Fix. Pokaż raport z usuwania Fixlog.
Kliknij Scan i pokaż nowy raport z FRST bez Addition i Shortcut.
Po co zainstalowałeś tego śmiecia SpyHunter.
Skasuj folder C:\FRST
Dzięki wielkie kwestia internetu się wyjaśniła .SpyHunter juz usunięty, tylko czy można jeszcze jakoś usunac te reklamy (co chwila nowe karty otwierające ).