Wyskakujące okienka important Message, reklamy itp

Dla specjalistów Bezpieczeństwo
#1

Proszę o pomoc. Poniżej załączam skany:

 

FRST – > http://www.wklej.org/hash/28331535141/

Addition --> http://www.wklej.org/hash/7309a80917d/

#2

Odinstaluj NinjaKit.Otwórz notatnik systemowy i wklej:

Hosts:
HKLM\...\Run: [RtHDVCpl] = C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12558440 2011-07-12] (Realtek Semiconductor)
HKU\S-1-5-21-3648498610-851535749-3584849008-1000\...\Run: [IXsoft] = C:\Users\Norbert\AppData\Local\IXsoft\tmp6BC8.exe [264472 2015-02-17] (The Eraser Project )
HKU\S-1-5-21-3648498610-851535749-3584849008-1000\...\Run: [Adlworks] = regsvr32.exe C:\Users\Norbert\AppData\Local\Adlworks\rnxsovpvli.dll ===== ATTENTION
HKU\S-1-5-21-3648498610-851535749-3584849008-1000\...\Run: [YQDPack] = C:\Windows\SysWOW64\regsvr32.exe C:\Users\Norbert\AppData\Local\IXsoft\RWDocumentAnimation.dll
HKU\S-1-5-21-3648498610-851535749-3584849008-1000\...\MountPoints2: {af3d29e1-9fcb-11e4-8ac1-1867b0c0513a} - H:\LG_PC_Programs.exe
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction ======= ATTENTION
SearchScopes: HKU\.DEFAULT - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: UniDeals - {2b70871e-4bd6-4c1f-ae16-c0c08bcb8c1b} - C:\Program Files (x86)\UniDeals\yWLyky3w87fyrd.x64.dll ()
BHO-x32: UniDeals - {2b70871e-4bd6-4c1f-ae16-c0c08bcb8c1b} - C:\Program Files (x86)\UniDeals\yWLyky3w87fyrd.dll ()
CHR StartupUrls: Default - "https://www.google.pl/?gws_rd=ssl", "hxxp://www.mystartsearch.com/?type=hpts=1424133805from=wpcuid=SAMSUNGXHM321HI_S26VJ9CBA01977"
2015-02-17 01:41 - 2015-02-17 01:41 - 00000000 ____ D () C:\Program Files (x86)\UniDeals
2015-02-17 01:40 - 2015-02-17 01:42 - 00000000 ____ D () C:\Users\Norbert\AppData\Local\IXsoft
2015-02-17 01:40 - 2015-02-17 01:40 - 00000000 ____ D () C:\Users\Norbert\AppData\Local\Adlworks
2015-02-17 01:40 - 2015-02-17 01:40 - 00000000 ____ D () C:\ProgramData\meliopdjeebcieoijhpfdkogebldbgoa
2015-02-17 01:40 - 2015-02-17 01:40 - 00000000 ____ D () C:\Program Files (x86)\UniDeaLsi
EmptyTemp:

Plik zapisz pod nazwą fixlist.txt i umieść obok FRST w tym samym folderze.