Wolny komputer i reklamy


(Buchciok) #1

Witam mam komputer z win 8.1. Ostatnio zaczely sie pojawiac reklamy komputer zwolnil. Komputer zaczal sprawiac problemy, nie dalo sie uruchomic antywirusa, po uruchomieniu nie dalo sie przejsc z menu na pulpit itp..


(Acorus) #2

Otwórz notatnik systemowy i wklej:

HKLM\...\Run: [RTHDVCPL] = C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13192848 2012-08-20] (Realtek Semiconductor)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] = C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe [40336 2014-12-03] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [mcui_exe] = "C:\Program Files\McAfee.com\Agent\mcagent.exe" /runkey
HKLM-x32\...\Run: [SunJavaUpdateSched] = C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [iTunesHelper] = C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-02-21] (Apple Inc.)
HKU\S-1-5-21-2801661118-2414831834-1438526420-1001\...\Run: [iFunBox Price Watch] = C:\Program Files (x86)\iFunbox 2014\iFunBox2014.exe /tray
HKU\S-1-5-21-2801661118-2414831834-1438526420-1001\...\MountPoints2: {982706d0-5ca6-11e4-bf35-08606e976588} - "E:\iLinker.exe"
HKU\S-1-5-21-2801661118-2414831834-1438526420-1001\...\MountPoints2: {c314d479-9822-11e3-824f-08606e976588} - "C:\WINDOWS\system32\RunDLL32.EXE" Shell32.DLL,ShellExec_RunDLL F:\autorun.bat
ShellIconOverlayIdentifiers: [DropboxExt1] - {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} = No File
ShellIconOverlayIdentifiers: [DropboxExt2] - {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} = No File
ShellIconOverlayIdentifiers: [DropboxExt3] - {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} = No File
ShellIconOverlayIdentifiers: [DropboxExt4] - {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} = No File
SearchScopes: HKU\.DEFAULT - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-2801661118-2414831834-1438526420-1001 - {94E36EAD-1020-4A16-9262-B7EA301164BA} URL = http://es.search.yahoo.com/search?fr=chr-greentree_ieei=utf-8ilc=12type=599486p={searchTerms}
Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No File
CHR StartupUrls: Default - "hxxp://www.google.es/", "hxxp://search.conduit.com/?ctid=CT3298566SearchSource=48CUI=UN88305765812246630UM=2sspv=CHNTR4B", "hxxp://start.iminent.com/?appId=BDE9C60A-8346-4B6B-B396-D95B00ED8C3D", "https://www.google.es/"
2015-02-01 14:44 - 2015-02-01 14:46 - 00000000 ____ D () C:\AdwCleaner
C:\ProgramData\SetStretch.exe
EmptyTemp:

Plik zapisz pod nazwą fixlist.txt i umieść obok FRST w tym samym folderze.