Wyskakujace okna IE z reklamami oraz wielokrotne otwarcie IE

Dla specjalistów Bezpieczeństwo
#1

Dzien dobry wszystkim. Problem pojawia się notorycznie. Co pare minut wyskakuje okienko Internet Explorer z reklama. Treść w większości jest blokowana przez Kaspersky’ego. Sporadycznie zdarza się, że IE otwiera nowe strony w nieskończoność i można tak zamykać i zamykać… Poniżej wklejam raport OTL

 

http://www.wklej.org/id/1562350/

 

z góry dziękuję za zainteresowanie tematem

#2

Pobierz i uruchom AdwCleaner https://toolslib.net/downloads/finish/1/ Kliknij Szukaj i później Usuń.

Pobierz Farbar Recovery Scan Tool http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/ zgodny z wersją systemu 32-bit

Uruchom FRST i kliknij Scan. Pokaż raport FRST i Addition.

#3

zrobione

 

frst

 

http://www.wklej.org/id/1562371/

 

addition

 

http://www.wklej.org/id/1562372/

#4

Otwórz Notatnik i wklej:

Task: C:\WINDOWS\Tasks\At1.job = C:\DOCUME~1\AWANSBIS\DANEAP~1\DSite\UPDATE~1\UPDATE~1.EXE ==== ATTENTION
Task: C:\WINDOWS\Tasks\At2.job = C:\DOCUME~1\AWANSBIS\DANEAP~1\Dealply\UPDATE~1\UPDATE~1.EXE ==== ATTENTION
Task: C:\WINDOWS\Tasks\DriverDoc_UPDATES.job = C:\Program Files\DriverDoc\Solvusoftdd.exe
HKLM\...\Run: [Adobe ARM] = C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM\...\Run: [SunJavaUpdateSched] = C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe [49263 2006-09-07] (Sun Microsystems, Inc.)
HKLM\...\Run: [tuto4pc_pl_20] = [X]
HKU\S-1-5-21-854245398-412668190-839522115-1004\...\Run: [Google Update] = C:\Documents and Settings\AWANSBIS\Ustawienia lokalne\Dane aplikacji\Google\Update\GoogleUpdate.exe [116648 2013-09-04] (Google Inc.)
HKU\S-1-5-21-854245398-412668190-839522115-1004\...\MountPoints2: {01416950-3610-11e3-9507-0019dbba9374} - F:\RunClubSanDisk.exe
HKU\S-1-5-21-854245398-412668190-839522115-1004\...\MountPoints2: {01416962-3610-11e3-9507-0019dbba9374} - F:\RunClubSanDisk.exe
HKU\S-1-5-21-854245398-412668190-839522115-1004\...\MountPoints2: {01416965-3610-11e3-9507-0019dbba9374} - F:\rxf.exe
HKU\S-1-5-21-854245398-412668190-839522115-1004\...\MountPoints2: {0141696a-3610-11e3-9507-0019dbba9374} - G:\MusaLLaT.exe
HKU\S-1-5-21-854245398-412668190-839522115-1004\...\MountPoints2: {0253d04e-19cf-11e3-b4f4-0019dbba9374} - F:\io3yalc.exe
HKU\S-1-5-21-854245398-412668190-839522115-1004\...\MountPoints2: {044c1354-ed40-11e3-b697-0019dbba9374} - F:\RunClubSanDisk.exe
HKU\S-1-5-21-854245398-412668190-839522115-1004\...\MountPoints2: {044c1361-ed40-11e3-b697-0019dbba9374} - CMD /C START ~Restore.{645FF040-5081-101B-9F08-00AA002F954E}\res-p0391726.id
HKU\S-1-5-21-854245398-412668190-839522115-1004\...\MountPoints2: {044c1362-ed40-11e3-b697-0019dbba9374} - F:\LaunchU3.exe -a
HKU\S-1-5-21-854245398-412668190-839522115-1004\...\MountPoints2: {06000820-539d-11e4-b3c9-0019dbba9374} - setup.exe
HKU\S-1-5-21-854245398-412668190-839522115-1004\...\MountPoints2: {07813d04-ef9c-11e3-bfdb-0019dbba9374} - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL driveinfo.exe f
HKU\S-1-5-21-854245398-412668190-839522115-1004\...\MountPoints2: {0f510b77-7384-11e3-a797-0019dbba9374} - F:\RunClubSanDisk.exe
HKU\S-1-5-21-854245398-412668190-839522115-1004\...\MountPoints2: {11186c99-2026-11e3-afe1-0019dbba9374} - RunClubSanDisk.exe
HKU\S-1-5-21-854245398-412668190-839522115-1004\...\MountPoints2: {1334ca3b-2f42-11e4-9243-0019dbba9374} - Setup.exe
HKU\S-1-5-21-854245398-412668190-839522115-1004\...\MountPoints2: {143497bf-59c7-11e4-aec6-0019dbba9374} - F:\LaunchU3.exe -a
HKU\S-1-5-21-854245398-412668190-839522115-1004\...\MountPoints2: {16d0b5cd-e62f-11e3-9b44-0019dbba9374} - DRVINST.EXE
HKU\S-1-5-21-854245398-412668190-839522115-1004\...\MountPoints2: {17b8aa37-4542-11e4-872d-0019dbba9374} - F:\RunClubSanDisk.exe
HKU\S-1-5-21-854245398-412668190-839522115-1004\...\MountPoints2: {17b8aa3a-4542-11e4-872d-0019dbba9374} - RunClubSanDisk.exe
HKU\S-1-5-21-854245398-412668190-839522115-1004\...\MountPoints2: {17e23a35-93b5-11e3-865d-0019dbba9374} - F:\FlashDiskUtility.exe
HKU\S-1-5-21-854245398-412668190-839522115-1004\...\MountPoints2: {1982f5c1-7769-11e3-8adb-0019dbba9374} - J:\USBNB.exe
HKU\S-1-5-21-854245398-412668190-839522115-1004\...\MountPoints2: {1982f5c7-7769-11e3-8adb-0019dbba9374} - G:\RunClubSanDisk.exe
HKU\S-1-5-21-854245398-412668190-839522115-1004\...\MountPoints2: {1c3651ca-4069-11e3-ab6c-0019dbba9374} - SecureII\Windows\SecureII.exe
HKU\S-1-5-21-854245398-412668190-839522115-1004\...\MountPoints2: {1c365222-4069-11e3-ab6c-0019dbba9374} - urDrive.exe
HKU\S-1-5-21-854245398-412668190-839522115-1004\...\MountPoints2: {1c365224-4069-11e3-ab6c-0019dbba9374} - F:\qhbfqx.exe
HKU\S-1-5-21-854245398-412668190-839522115-1004\...\MountPoints2: {2045fc5d-5364-11e4-ab3b-0019dbba9374} - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL windrvcd.exe
HKU\S-1-5-21-854245398-412668190-839522115-1004\...\MountPoints2: {2045fc7b-5364-11e4-ab3b-0019dbba9374} - H:\USBNB.exe
HKU\S-1-5-21-854245398-412668190-839522115-1004\...\MountPoints2: {213b28cb-3951-11e3-b5b0-0019dbba9374} - F:\__eego\eego.exe
HKU\S-1-5-21-854245398-412668190-839522115-1004\...\MountPoints2: {23ac4a31-421c-11e4-aef1-0019dbba9374} - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL Toshiba Places.html
HKU\S-1-5-21-854245398-412668190-839522115-1004\...\MountPoints2: {25787e3a-5dd3-11e4-a74c-0019dbba9374} - F:\ArcaVirMenu.exe
HKU\S-1-5-21-854245398-412668190-839522115-1004\...\MountPoints2: {280c7dc2-003f-11e3-9dbc-0019dbba9374} - F:\AutoRun.exe
HKU\S-1-5-21-854245398-412668190-839522115-1004\...\MountPoints2: {280c7dc3-003f-11e3-9dbc-0019dbba9374} - F:\AutoRun.exe
HKU\S-1-5-21-854245398-412668190-839522115-1004\...\MountPoints2: {2894b5a4-4cf4-11e3-8d1c-0019dbba9374} - CMD /C START ~Restore.{645FF040-5081-101B-9F08-00AA002F954E}\res-p3950610.id
HKU\S-1-5-21-854245398-412668190-839522115-1004\...\MountPoints2: {29ffef9c-f2be-11e3-9284-0019dbba9374} - G:\LaunchU3.exe -a
HKU\S-1-5-21-854245398-412668190-839522115-1004\...\MountPoints2: {2a598037-a92f-11e3-924f-0019dbba9374} - F:\setupSNK.exe
HKU\S-1-5-21-854245398-412668190-839522115-1004\...\MountPoints2: {2b235002-2daf-11e4-9b4f-0019dbba9374} - F:\LaunchU3.exe -a
HKU\S-1-5-21-854245398-412668190-839522115-1004\...\MountPoints2: {2c9ad9e4-f6a8-11e3-a7a0-0019dbba9374} - F:\LaunchU3.exe -a
HKU\S-1-5-21-854245398-412668190-839522115-1004\...\MountPoints2: {2d0c4560-072f-11e4-b369-0019dbba9374} - H:\LaunchU3.exe -a
HKU\S-1-5-21-854245398-412668190-839522115-1004\...\MountPoints2: {2d51fc27-3235-11e3-a5e5-0019dbba9374} - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL explore.exe
HKU\S-1-5-21-854245398-412668190-839522115-1004\...\MountPoints2: {31d53ee5-3fc4-11e4-8cc3-0019dbba9374} - RunClubSanDisk.exe
HKU\S-1-5-21-854245398-412668190-839522115-1004\...\MountPoints2: {31d53eea-3fc4-11e4-8cc3-0019dbba9374} - F:\
HKU\S-1-5-21-854245398-412668190-839522115-1004\...\MountPoints2: {32911296-17b6-11e4-a2e2-0019dbba9374} - F:\ autoplay=true
HKU\S-1-5-21-854245398-412668190-839522115-1004\...\MountPoints2: {35fded15-4794-11e3-a21c-0019dbba9374} - F:\LaunchU3.exe -a
HKU\S-1-5-21-854245398-412668190-839522115-1004\...\MountPoints2: {376b6cc6-0ede-11e3-b363-0019dbba9374} - F:\LaunchU3.exe -a
HKU\S-1-5-21-854245398-412668190-839522115-1004\...\MountPoints2: {3f94e628-ad9f-11e3-8a4f-0019dbba9374} - F:\ArcaVirMenu.exe
HKU\S-1-5-21-854245398-412668190-839522115-1004\...\MountPoints2: {40f7861a-4f76-11e4-a397-0019dbba9374} - G:\setup.exe
HKU\S-1-5-21-854245398-412668190-839522115-1004\...\MountPoints2: {424fb959-355c-11e3-b639-0019dbba9374} - F:\MicroLauncher.exe
HKU\S-1-5-21-854245398-412668190-839522115-1004\...\MountPoints2: {4287b8af-f5fd-11e3-ad08-0019dbba9374} - F:\urDrive.exe
HKU\S-1-5-21-854245398-412668190-839522115-1004\...\MountPoints2: {45c9de9c-3ba3-11e3-aeed-0019dbba9374} - F:\sources\sperr32.exe x64
HKU\S-1-5-21-854245398-412668190-839522115-1004\...\MountPoints2: {45fa8746-d674-11e3-814d-0019dbba9374} - RunClubSanDisk.exe
HKU\S-1-5-21-854245398-412668190-839522115-1004\...\MountPoints2: {4762a8dc-bee2-11e3-8315-0019dbba9374} - wrsf.exe
HKU\S-1-5-21-854245398-412668190-839522115-1004\...\MountPoints2: {4b116b70-4dde-11e4-bbfd-0019dbba9374} - F:\ autoplay=true
HKU\S-1-5-21-854245398-412668190-839522115-1004\...\MountPoints2: {4b116b72-4dde-11e4-bbfd-0019dbba9374} - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL windsrcn.exe
HKU\S-1-5-21-854245398-412668190-839522115-1004\...\MountPoints2: {4c76621b-6a61-11e4-89f8-0019dbba9374} - RunClubSanDisk.exe
HKU\S-1-5-21-854245398-412668190-839522115-1004\...\MountPoints2: {512de2ef-8a95-11e3-9ce5-0019dbba9374} - F:\AutoRun.exe
HKU\S-1-5-21-854245398-412668190-839522115-1004\...\MountPoints2: {512de2f0-8a95-11e3-9ce5-0019dbba9374} - F:\AutoRun.exe
HKU\S-1-5-21-854245398-412668190-839522115-1004\...\MountPoints2: {512de2f1-8a95-11e3-9ce5-0019dbba9374} - F:\AutoRun.exe
HKU\S-1-5-21-854245398-412668190-839522115-1004\...\MountPoints2: {512de2f2-8a95-11e3-9ce5-0019dbba9374} - F:\AutoRun.exe
HKU\S-1-5-21-854245398-412668190-839522115-1004\...\MountPoints2: {51a99f4d-490e-11e3-870f-0019dbba9374} - F:\AutoRun.exe
HKU\S-1-5-21-854245398-412668190-839522115-1004\...\MountPoints2: {51a99f50-490e-11e3-870f-0019dbba9374} - G:\AutoRun.exe
HKU\S-1-5-21-854245398-412668190-839522115-1004\...\MountPoints2: {51a99f51-490e-11e3-870f-0019dbba9374} - RunClubSanDisk.exe
HKU\S-1-5-21-854245398-412668190-839522115-1004\...\MountPoints2: {55f3f223-7539-11e4-991b-0019dbba9374} - F:\egmjjb.exe
HKU\S-1-5-21-854245398-412668190-839522115-1004\...\MountPoints2: {55f3f230-7539-11e4-991b-0019dbba9374} - G:\USBNB.exe
HKU\S-1-5-21-854245398-412668190-839522115-1004\...\MountPoints2: {565bce9c-d419-11e3-8998-0019dbba9374} - RunClubSanDisk.exe
HKU\S-1-5-21-854245398-412668190-839522115-1004\...\MountPoints2: {565cbf13-47b9-11e3-9116-0019dbba9374} - F:\LaunchU3.exe -a
HKU\S-1-5-21-854245398-412668190-839522115-1004\...\MountPoints2: {58c800c8-3c72-11e3-b82a-0019dbba9374} - F:\ArcaVirMenu.exe
HKU\S-1-5-21-854245398-412668190-839522115-1004\...\MountPoints2: {59632e23-a369-11e3-a624-0019dbba9374} - RunClubSanDisk.exe
HKU\S-1-5-21-854245398-412668190-839522115-1004\...\MountPoints2: {5c43a38f-397a-11e4-8701-0019dbba9374} - F:\LaunchU3.exe -a
HKU\S-1-5-21-854245398-412668190-839522115-1004\...\MountPoints2: {5d4b46f7-aa7e-11e3-9768-0019dbba9374} - F:\atorvox_ok7.exe
HKU\S-1-5-21-854245398-412668190-839522115-1004\...\MountPoints2: {5d4b46f9-aa7e-11e3-9768-0019dbba9374} - F:\urDrive.exe
HKU\S-1-5-21-854245398-412668190-839522115-1004\...\MountPoints2: {60b962d9-54f7-11e4-966b-0019dbba9374} - F:\RunClubSanDisk.exe
HKU\S-1-5-21-854245398-412668190-839522115-1004\...\MountPoints2: {65dae1b1-d99a-11e3-8174-0019dbba9374} - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL windsrcn.exe
HKU\S-1-5-21-854245398-412668190-839522115-1004\...\MountPoints2: {67052489-3af8-11e3-b04c-0019dbba9374} - RunClubSanDisk.exe
HKU\S-1-5-21-854245398-412668190-839522115-1004\...\MountPoints2: {681865ef-0e13-11e3-aa41-0019dbba9374} - F:\8paf1d.com
HKU\S-1-5-21-854245398-412668190-839522115-1004\...\MountPoints2: {6945948e-cf64-11e3-aca4-0019dbba9374} - F:\RunClubSanDisk.exe
HKU\S-1-5-21-854245398-412668190-839522115-1004\...\MountPoints2: {6d06a95e-dfe4-11e3-abd6-0019dbba9374} - F:\urDrive.exe
HKU\S-1-5-21-854245398-412668190-839522115-1004\...\MountPoints2: {70f05d52-ae6b-11e3-ae2d-0019dbba9374} - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL driveinfo.exe f
HKU\S-1-5-21-854245398-412668190-839522115-1004\...\MountPoints2: {74e2a0c9-81ca-11e4-b018-0019dbba9374} - F:\lcw.exe
HKU\S-1-5-21-854245398-412668190-839522115-1004\...\MountPoints2: {75076e8e-7b82-11e4-8f68-0019dbba9374} - F:\RunClubSanDisk.exe
HKU\S-1-5-21-854245398-412668190-839522115-1004\...\MountPoints2: {75d866e5-7e7d-11e3-9d8b-0019dbba9374} - F:\setup.exe
HKU\S-1-5-21-854245398-412668190-839522115-1004\...\MountPoints2: {76255e20-12cf-11e3-9522-0019dbba9374} - explorent.exe
HKU\S-1-5-21-854245398-412668190-839522115-1004\...\MountPoints2: {7866dd9c-fdb9-11e3-b9d6-0019dbba9374} - RunClubSanDisk.exe
HKU\S-1-5-21-854245398-412668190-839522115-1004\...\MountPoints2: {7c14bf01-5901-11e4-8ae6-0019dbba9374} - F:\LaunchU3.exe -a
HKU\S-1-5-21-854245398-412668190-839522115-1004\...\MountPoints2: {7cd98702-5a7d-11e4-94dc-0019dbba9374} - F:\AutoRun.exe
HKU\S-1-5-21-854245398-412668190-839522115-1004\...\MountPoints2: {80cc1406-5b1f-11e3-a6da-0019dbba9374} - F:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-854245398-412668190-839522115-1004\...\MountPoints2: {80cc1416-5b1f-11e3-a6da-0019dbba9374} - F:\setupSNK.exe
HKU\S-1-5-21-854245398-412668190-839522115-1004\...\MountPoints2: {81e33221-5be8-11e3-966b-0019dbba9374} - RunClubSanDisk.exe
HKU\S-1-5-21-854245398-412668190-839522115-1004\...\MountPoints2: {81e33234-5be8-11e3-966b-0019dbba9374} - F:\rwj0.cmd
HKU\S-1-5-21-854245398-412668190-839522115-1004\...\MountPoints2: {830f076c-897a-11e3-bf48-0019dbba9374} - F:\LaunchU3.exe -a
HKU\S-1-5-21-854245398-412668190-839522115-1004\...\MountPoints2: {853dccb3-f064-11e3-8397-0019dbba9374} - RunClubSanDisk.exe
HKU\S-1-5-21-854245398-412668190-839522115-1004\...\MountPoints2: {8db7b58e-a8ea-11e3-bd76-0019dbba9374} - G:\urDrive.exe
HKU\S-1-5-21-854245398-412668190-839522115-1004\...\MountPoints2: {93abe03c-3d3c-11e3-8f29-0019dbba9374} - F:\AutoRun.exe
HKU\S-1-5-21-854245398-412668190-839522115-1004\...\MountPoints2: {93c4b421-1b68-11e3-86d5-0019dbba9374} - F:\LaunchU3.exe -a
HKU\S-1-5-21-854245398-412668190-839522115-1004\...\MountPoints2: {93c4b42a-1b68-11e3-86d5-0019dbba9374} - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL dUEcuF.Exe
HKU\S-1-5-21-854245398-412668190-839522115-1004\...\MountPoints2: {945b22a6-3a17-11e3-948b-0019dbba9374} - J:\setup.exe
HKU\S-1-5-21-854245398-412668190-839522115-1004\...\MountPoints2: {945b22d4-3a17-11e3-948b-0019dbba9374} - F:\start.exe
HKU\S-1-5-21-854245398-412668190-839522115-1004\...\MountPoints2: {94bf4c0d-62fb-11e3-96ed-0019dbba9374} - F:\AutoRun.exe
HKU\S-1-5-21-854245398-412668190-839522115-1004\...\MountPoints2: {976231c4-661e-11e3-af35-0019dbba9374} - F:\Play.exe
HKU\S-1-5-21-854245398-412668190-839522115-1004\...\MountPoints2: {98a01456-348e-11e3-93ae-0019dbba9374} - F:\urDrive.exe
HKU\S-1-5-21-854245398-412668190-839522115-1004\...\MountPoints2: {9dc6d7a3-b321-11e3-8fdc-0019dbba9374} - G:\USBNB.exe
HKU\S-1-5-21-854245398-412668190-839522115-1004\...\MountPoints2: {9f1febc4-3ae1-11e3-9300-0019dbba9374} - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL FinalDucer09202009.mov
HKU\S-1-5-21-854245398-412668190-839522115-1004\...\MountPoints2: {a0a6c33e-3bc6-11e3-9dcc-0019dbba9374} - F:\MicroLauncher.exe
HKU\S-1-5-21-854245398-412668190-839522115-1004\...\MountPoints2: {a1a65fe5-37e5-11e4-92c8-0019dbba9374} - F:\RunClubSanDisk.exe
HKU\S-1-5-21-854245398-412668190-839522115-1004\...\MountPoints2: {a35a0239-34c1-11e4-955c-0019dbba9374} - F:\LaunchU3.exe -a
HKU\S-1-5-21-854245398-412668190-839522115-1004\...\MountPoints2: {abb7bfcb-ebad-11e3-9472-0019dbba9374} - sources\sperr32.exe x64
HKU\S-1-5-21-854245398-412668190-839522115-1004\...\MountPoints2: {b09e5716-0cad-11e4-be18-0019dbba9374} - RunClubSanDisk.exe
HKU\S-1-5-21-854245398-412668190-839522115-1004\...\MountPoints2: {b0c9c964-e565-11e3-973a-0019dbba9374} - G:\sources\SetupError.exe x64
HKU\S-1-5-21-854245398-412668190-839522115-1004\...\MountPoints2: {b9fc3db9-85b8-11e4-9c5f-0019dbba9374} - F:\setup.exe
HKU\S-1-5-21-854245398-412668190-839522115-1004\...\MountPoints2: {bcc29d8e-4d1d-11e4-9a50-0019dbba9374} - G:\AutoRun.exe
HKU\S-1-5-21-854245398-412668190-839522115-1004\...\MountPoints2: {c00abaeb-1912-11e3-a098-0019dbba9374} - F:\AutoRun.exe
HKU\S-1-5-21-854245398-412668190-839522115-1004\...\MountPoints2: {c021b74f-59e1-11e4-b34d-0019dbba9374} - F:\RunClubSanDisk.exe
HKU\S-1-5-21-854245398-412668190-839522115-1004\...\MountPoints2: {c2be2672-8b15-11e3-853e-0019dbba9374} - RunClubSanDisk.exe
HKU\S-1-5-21-854245398-412668190-839522115-1004\...\MountPoints2: {c56daab4-4b6e-11e3-9803-0019dbba9374} - F:\setup.exe
HKU\S-1-5-21-854245398-412668190-839522115-1004\...\MountPoints2: {c59ac916-97a1-11e3-b093-0019dbba9374} - G:\ArcaVir2009USBMenu.exe
HKU\S-1-5-21-854245398-412668190-839522115-1004\...\MountPoints2: {cb795bea-03e1-11e3-bf36-0019dbba9374} - F:\AutoRun.exe
HKU\S-1-5-21-854245398-412668190-839522115-1004\...\MountPoints2: {cb795beb-03e1-11e3-bf36-0019dbba9374} - F:\AutoRun.exe
HKU\S-1-5-21-854245398-412668190-839522115-1004\...\MountPoints2: {cbeece43-4131-11e3-8b5e-0019dbba9374} - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL explore.exe
HKU\S-1-5-21-854245398-412668190-839522115-1004\...\MountPoints2: {cbeece6a-4131-11e3-8b5e-0019dbba9374} - F:\LaunchU3.exe -a
HKU\S-1-5-21-854245398-412668190-839522115-1004\...\MountPoints2: {cfae7b05-b646-11e3-91f5-0019dbba9374} - F:\LaunchU3.exe
HKU\S-1-5-21-854245398-412668190-839522115-1004\...\MountPoints2: {d0854dcd-84ee-11e4-b6f4-0019dbba9374} - F:\LaunchU3.exe -a
HKU\S-1-5-21-854245398-412668190-839522115-1004\...\MountPoints2: {d3256f07-063a-11e3-8b49-0019dbba9374} - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL driveinfo.exe f
HKU\S-1-5-21-854245398-412668190-839522115-1004\...\MountPoints2: {d540e5b4-2fd0-11e3-8b2c-0019dbba9374} - F:\LaunchU3.exe -a
HKU\S-1-5-21-854245398-412668190-839522115-1004\...\MountPoints2: {d66997f2-316d-11e3-b512-0019dbba9374} - K:\{Patii-egregregerfwde}\svhost.exe
HKU\S-1-5-21-854245398-412668190-839522115-1004\...\MountPoints2: {dcd69dee-79ee-11e4-b9cb-0019dbba9374} - F:\LaunchU3.exe -a
HKU\S-1-5-21-854245398-412668190-839522115-1004\...\MountPoints2: {dde51f08-3f8b-11e3-a16d-0019dbba9374} - F:\RunClubSanDisk.exe
HKU\S-1-5-21-854245398-412668190-839522115-1004\...\MountPoints2: {de457d75-0a28-11e3-ad42-0019dbba9374} - F:\AutoRun.exe
HKU\S-1-5-21-854245398-412668190-839522115-1004\...\MountPoints2: {de457d76-0a28-11e3-ad42-0019dbba9374} - F:\AutoRun.exe
HKU\S-1-5-21-854245398-412668190-839522115-1004\...\MountPoints2: {e2b19541-3e0e-11e3-92bd-0019dbba9374} - F:\LaunchU3.exe -a
HKU\S-1-5-21-854245398-412668190-839522115-1004\...\MountPoints2: {e41b0a7f-0894-11e3-8fc7-0019dbba9374} - F:\LaunchU3.exe -a
HKU\S-1-5-21-854245398-412668190-839522115-1004\...\MountPoints2: {e556c34b-5b43-11e4-93ba-0019dbba9374} - RunClubSanDisk.exe
HKU\S-1-5-21-854245398-412668190-839522115-1004\...\MountPoints2: {e7663ba6-139a-11e3-be66-0019dbba9374} - F:\LaunchU3.exe -a
HKU\S-1-5-21-854245398-412668190-839522115-1004\...\MountPoints2: {eaefdd1a-21ba-11e3-8459-0019dbba9374} - F:\setupSNK.exe
HKU\S-1-5-21-854245398-412668190-839522115-1004\...\MountPoints2: {ed41faa9-cd13-11e3-bda4-0019dbba9374} - F:\MicroLauncher.exe
HKU\S-1-5-21-854245398-412668190-839522115-1004\...\MountPoints2: {ed99f338-8423-11e4-b338-0019dbba9374} - RunClubSanDisk.exe
HKU\S-1-5-21-854245398-412668190-839522115-1004\...\MountPoints2: {f08531d6-88b3-11e3-aa77-0019dbba9374} - F:\LGAutoRun.exe
HKU\S-1-5-21-854245398-412668190-839522115-1004\...\MountPoints2: {f179874a-4857-11e3-87ad-0019dbba9374} - F:\RunClubSanDisk.exe
HKU\S-1-5-21-854245398-412668190-839522115-1004\...\MountPoints2: {f3a8942f-78fc-11e3-94c9-0019dbba9374} - F:\RunClubSanDisk.exe
HKU\S-1-5-21-854245398-412668190-839522115-1004\...\MountPoints2: {f88b54e5-3a40-11e4-ad2e-0019dbba9374} - F:\RunClubSanDisk.exe
HKU\S-1-5-21-854245398-412668190-839522115-1004\...\MountPoints2: {f8e27100-73a6-11e4-9db7-0019dbba9374} - RunClubSanDisk.exe
HKU\S-1-5-21-854245398-412668190-839522115-1004\...\MountPoints2: {f8e2710a-73a6-11e4-9db7-0019dbba9374} - F:\autorun.exe
HKU\S-1-5-21-854245398-412668190-839522115-1004\...\MountPoints2: {f9226765-8a44-11e3-bf0a-0019dbba9374} - F:\AutoRun.exe
HKU\S-1-5-21-854245398-412668190-839522115-1004\...\MountPoints2: {f9226768-8a44-11e3-bf0a-0019dbba9374} - F:\AutoRun.exe
HKU\S-1-5-21-854245398-412668190-839522115-1004\...\MountPoints2: {f9358683-a29f-11e3-86f1-0019dbba9374} - F:\LaunchU3.exe -a
HKU\S-1-5-21-854245398-412668190-839522115-1004\...\MountPoints2: {fd601dc9-cc3f-11e3-aac7-0019dbba9374} - F:\sources\sperr32.exe x64
HKU\S-1-5-21-854245398-412668190-839522115-1004\...\MountPoints2: {fd746989-273d-11e3-b4a3-0019dbba9374} - F:\LaunchU3.exe -a
HKU\S-1-5-21-854245398-412668190-839522115-1004\...\MountPoints2: {ff7fe284-76ca-11e4-b685-0019dbba9374} - F:\ArcaVirMenu.exe
SearchScopes: HKU\.DEFAULT - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
S3 hwdatacard; system32\DRIVERS\ewusbmdm.sys [X]
S4 IntelIde; No ImagePath
S2 SSPORT; \\C:\WINDOWS\system32\Drivers\SSPORT.sys [X]
U1 WS2IFSL; No ImagePath
2014-12-19 09:34 - 2014-12-19 09:39 - 00000000 ____ D () C:\AdwCleaner
C:\Windows\Tasks\At1.job
C:\Windows\Tasks\At2.job
EmptyTemp:

Plik zapisz pod nazwą fixlist.txt i umieść obok FRST w tym samym folderze.

#5

fixlog

 

http://wklej.org/id/1562382/

 

wyglada na to ze problem rozwiazany. od 30 min zadnego okienka.

 

Bardzo ale to bardzo dziekuje za tak sprawne rozwiazanie problemu.

#6

Skasuj folder C:\FRST