Wyskakujące reklamy, przekierowanie na inne strony, wolny internet

Podepnę się, ponieważ mam ten sam problem. Proszę o pomoc.

FRST

Addition

Shortcut

Pobierz i uruchom AdwCleaner Kliknij Skanuj (Scan) i później Usuń (Cleaning).

 

Skan po czyszczeniu

Wklej do systemowego notatnika i zapisz jako plik tekstowy o nazwie fixlist :

CloseProcesses:
AutoConfigURL: [S-1-5-21-2364053571-1688699597-3794167507-1000] = hxxp://get-access.me/wpad.dat?791b60f307d87548289ec784e545d1ec738858
Winsock: Catalog5 08 C:\Program Files (x86)\Bonjour\mdnsNSP.dll Brak pliku
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.oursurfing.com/web/?type=dsts=1444854789z=4d4e769b53f2f1d44f0bae5g9zezaz2baw0z1m9batfrom=exp1uid=samsungxssdx840xevox120gb_s1d5nsaf448300bq={searchTerms}
SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.oursurfing.com/web/?type=dsts=1444854789z=4d4e769b53f2f1d44f0bae5g9zezaz2baw0z1m9batfrom=exp1uid=samsungxssdx840xevox120gb_s1d5nsaf448300bq={searchTerms}
Handler: WSIEChrome - Brak wartości CLSID
R1 {0c0bb4a8-45a4-4685-9c1d-08d98af4b926}Gw64; C:\Windows\System32\drivers\{0c0bb4a8-45a4-4685-9c1d-08d98af4b926}Gw64.sys [61112 2014-06-05] (StdLib)
S3 vmci; \SystemRoot\system32\DRIVERS\vmci.sys [X]
S3 VMnetAdapter; system32\DRIVERS\vmnetadapter.sys [X]
C:\Windows\System32\drivers\{0c0bb4a8-45a4-4685-9c1d-08d98af4b926}Gw64.sys
2015-12-09 19:36 - 2015-12-09 19:39 - 00000000 ____ D C:\AdwCleaner
2015-12-06 14:45 - 2015-12-06 14:47 - 00000000 ____ D C:\ProgramData\InstallMate
2015-12-09 19:40 - 2015-02-10 16:15 - 00000434 _____ C:\Windows\system32\Drivers\etc\hosts.ics
2015-11-30 11:15 - 2014-10-11 10:49 - 00000000 ____ D C:\Temp
2015-06-01 12:32 - 2015-06-01 12:32 - 0000016 _____ () C:\ProgramData\mntemp
Task: {14A44994-0954-4365-B87F-F4A9CA48A0C7} - System32\Tasks\{3D92B60A-BE6C-4527-BE14-3DF4EFD45FE6} = pcalua.exe -a "C:\Program Files (x86)\MATLAB71\uninstall\uninstall.exe" -c C:\Program Files (x86)\MATLAB71\
Task: {1CFC8F3B-8C2B-4328-A389-73FBA83F2B6B} - System32\Tasks\{556D086E-B4F3-4096-8A18-C0852ED0C513} = pcalua.exe -a D:\Setup.exe -d D:\
Task: {657ACC12-F4A1-450B-A345-1BECC552E433} - System32\Tasks\{C7F143CD-80BF-4C0E-89ED-6D36E52CDE3F} = D:\setup.exe
Task: {72593F49-6FAE-44F6-B749-C3BB66937C0A} - System32\Tasks\{6BC6C7EF-1F43-4144-A2DD-3BC657645CDF} = pcalua.exe -a "G:\Solidworks 2013   PL  64 bit (malojd2)\SW2013 Premium 64bit sp0 (wersja PL)\_SolidSQUAD_\SW2010-2013.Activator.SSQ.exe" -d "G:\Solidworks 2013   PL  64 bit (malojd2)\SW2013 Premium 64bit sp0 (wersja PL)\_SolidSQUAD_"
Task: {913AAC80-7714-4F3C-AB9D-EF7FBB8422BA} - System32\Tasks\{8A5943C2-74BB-4958-AE75-8855CC549869} = pcalua.exe -a C:\Windows\system32\pcwrun.exe -c "C:\Program Files (x86)\MATLAB71\bin\win32\MATLAB.exe"
Task: {9FFC0780-7FEA-4350-9D09-33E30713B82D} - System32\Tasks\{9F242791-216C-4F0D-A04F-59F5409A9479} = pcalua.exe -a E:\setup.exe -d E:\
Task: {F27FAFE4-C2AA-428A-8CA2-EB3ADCC82745} - System32\Tasks\{94F23997-218B-45C3-9573-931DE8C8E504} = pcalua.exe -a F:\MS.Office.2007.PL.Enterprise.SP2.CrAcEd-rahab\SETUP.EXE -d F:\MS.Office.2007.PL.Enterprise.SP2.CrAcEd-rahab
Task: {F5635D30-C5D1-4B54-9F8C-950CFD7BE81D} - \Opera scheduled Autoupdate 1402222263 - Brak pliku ==== UWAGA
Task: {FCE32EB9-1F11-47BD-B1A3-A99E1D9DDC7F} - System32\Tasks\klcp_update = C:\Program Files (x86)\K-Lite Codec Pack\Tools\CodecTweakTool.exe [2015-08-24] ()
Task: {FE88AEE8-E32D-41CB-8036-BE69E05053BF} - System32\Tasks\{3625EE3D-FA66-40D4-A1D8-D15A27028C62} = pcalua.exe -a "C:\Program Files (x86)\Leksykonia\TL7\bin\UNINSTAL.EXE" -d "C:\Program Files (x86)\Leksykonia\TL7\bin\"
ShortcutWithArgument: C:\Users\Tobiasz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk - C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) - "hxxp://esurf.biz/?ssid=1444854769a=1003679" ==== UWAGA
ShortcutWithArgument: C:\Users\Tobiasz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk - C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) - "hxxp://esurf.biz/?ssid=1444854769a=1003679" ==== UWAGA
EmptyTemp:

Uruchom FRST i kliknij Napraw (Fix). Pokaż raport z usuwania Fixlog.

 

FRST

Skasuj folder C:\FRST