Pomocy!
http://www.wklej.org/id/1829217/
http://www.wklej.org/id/1829219/
W panelu sterowania odinstaluj:
Podałem link skąd należy pobrać najnowszą wersję AdwCleaner.
mam zablokowaną jakąś usługę na telefonie i nie mogę pobrać z tego linku
Przecież masz komputer.
Wklej do systemowego notatnika i zapisz jako plik tekstowy o nazwie fixlist :
HKLM-x32\...\Run: [] = [X]
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.aqovd.com?oem=sunadplv3uid=S3P31MG1_ST500LT012-1DG142tm=1445630755
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = www.aqovd.com?oem=sunadplv3uid=S3P31MG1_ST500LT012-1DG142tm=1445630755
HKU\S-1-5-21-4106056497-4204844440-1024353544-1002\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.aqovd.com?oem=sunadplv3uid=S3P31MG1_ST500LT012-1DG142tm=1445630755
SearchScopes: HKU\.DEFAULT - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
FF SelectedSearchEngine: webssearches
FF ExtraCheck: C:\Program Files (x86)\mozilla firefox\browser\defaults\preferences\prefs.js [2015-10-31] ==== UWAGA (Linkuje do pliku *.cfg)
FF ExtraCheck: C:\Program Files (x86)\mozilla firefox\cfg [2015-10-31] ==== UWAGA
S3 Survarium-Steam Update Service; "C:\Program Files (x86)\Steam\steamapps\common\Survarium\game\binaries\x86\survarium_service.exe" "Survarium-Steam" [X]
S3 EagleX64; \??\C:\WINDOWS\system32\drivers\EagleX64.sys [X]
S3 MBAMSwissArmy; \??\C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [X]
2015-10-30 12:01 - 2015-10-31 18:44 - 00000000 ____ D C:\AdwCleaner
2015-10-24 09:59 - 2015-10-24 10:00 - 03237248 _____ (Enigma Software Group USA, LLC.) C:\Users\pluta\SpyHunter-Installer.exe
2015-10-23 20:23 - 2015-10-30 11:38 - 00000004 _____ C:\WINDOWS\SysWOW64\029B560A371F4E00AB32838EBC01B9E7
2015-10-23 20:15 - 2013-08-22 14:25 - 00000824 _____ C:\WINDOWS\system32\Drivers\etc\hp.bak
2014-12-02 21:33 - 2014-12-02 21:33 - 0000021 _____ () C:\Users\pluta\AppData\Roaming\my_intel.sys
2014-11-19 19:03 - 2015-03-13 16:01 - 0000074 _____ () C:\Users\pluta\AppData\Roaming\sp_data.sys
2015-09-14 11:54 - 2015-10-28 13:41 - 0000098 _____ () C:\ProgramData\{262E20B8-6E20-4CEF-B1FD-D022AB1085F5}.dat
Task: {0DE40406-0ED0-4360-BAAF-5C9760C43C3D} - System32\Tasks\psv_Strongsing = cmd.exe /c regedit.exe /s "C:\ProgramData\Danlax\Warmtex.reg" amp; del "C:\ProgramData\Danlax\Warmtex.reg" amp; SCHTASKS /Delete /TN "psv_Strongsing" /F ==== UWAGA
Task: {188A8707-6CDD-4CBE-9843-28D9469D241F} - System32\Tasks\psv_Tresis = cmd.exe /c regedit.exe /s "C:\ProgramData\Danlax\Zoomremdex.reg" amp; del "C:\ProgramData\Danlax\Zoomremdex.reg" amp; SCHTASKS /Delete /TN "psv_Tresis" /F ==== UWAGA
Task: {18CA02B5-3B44-4452-B86F-6FA603B7B365} - System32\Tasks\psv_Topfix = cmd.exe /c regedit.exe /s "C:\ProgramData\Danlax\Tamptip.reg" amp; del "C:\ProgramData\Danlax\Tamptip.reg" amp; SCHTASKS /Delete /TN "psv_Topfix" /F ==== UWAGA
Task: {29293D30-18E3-4E3F-A4F5-587C1027C9D5} - System32\Tasks\psv_CofBam = cmd.exe /c regedit.exe /s "C:\ProgramData\Danlax\VillaAnlex.reg" amp; del "C:\ProgramData\Danlax\VillaAnlex.reg" amp; SCHTASKS /Delete /TN "psv_CofBam" /F ==== UWAGA
Task: {47E9B4F8-F8B1-4ED9-821A-FCB7FF7E16A9} - System32\Tasks\psv_Zotozelight = cmd.exe /c regedit.exe /s "C:\ProgramData\Danlax\TrustBam.reg" amp; del "C:\ProgramData\Danlax\TrustBam.reg" amp; SCHTASKS /Delete /TN "psv_Zotozelight" /F ==== UWAGA
Task: {4BB7DEC4-362D-4BBF-8D58-DF10685D1063} - System32\Tasks\psv_San-Ing = cmd.exe /c regedit.exe /s "C:\ProgramData\Danlax\Techgodax.reg" amp; del "C:\ProgramData\Danlax\Techgodax.reg" amp; SCHTASKS /Delete /TN "psv_San-Ing" /F ==== UWAGA
Task: {53031EBC-EEF8-4631-A5A3-6475C87BDD0E} - System32\Tasks\psv_Domtom = cmd.exe /c regedit.exe /s "C:\ProgramData\Danlax\Dondox.reg" amp; del "C:\ProgramData\Danlax\Dondox.reg" amp; SCHTASKS /Delete /TN "psv_Domtom" /F ==== UWAGA
Task: {7A8E7EF4-4355-48DC-A453-3486830A245C} - System32\Tasks\psv_Medfix = cmd.exe /c regedit.exe /s "C:\ProgramData\Danlax\Kinstock.reg" amp; del "C:\ProgramData\Danlax\Kinstock.reg" amp; SCHTASKS /Delete /TN "psv_Medfix" /F ==== UWAGA
Task: {92303492-68F3-4329-822A-0D71BABB6DE4} - System32\Tasks\psv_Y-sing = cmd.exe /c regedit.exe /s "C:\ProgramData\Danlax\Doubleflex.reg" amp; del "C:\ProgramData\Danlax\Doubleflex.reg" amp; SCHTASKS /Delete /TN "psv_Y-sing" /F ==== UWAGA
Task: {97371EC9-1760-4D2B-8EC9-F473829793C7} - System32\Tasks\psv_Mathlab = cmd.exe /c regedit.exe /s "C:\ProgramData\Danlax\Zathsailla.reg" amp; del "C:\ProgramData\Danlax\Zathsailla.reg" amp; SCHTASKS /Delete /TN "psv_Mathlab" /F ==== UWAGA
Task: {A16BA70C-73A9-41FB-8FCF-C0B749E55530} - System32\Tasks\{A21CEC4F-ACB6-4B94-9CBE-02C93EBA02D1} = Firefox.exe hxxp://www.skype.com/go/downloading?source=lightinstalleramp;ver=7.12.0.101amp;LastError=12007
Task: {A25721BA-8858-477E-AB90-04D2D7A2CF8E} - System32\Tasks\psv_Tiplab = cmd.exe /c regedit.exe /s "C:\ProgramData\Danlax\GoodQuadcom.reg" amp; del "C:\ProgramData\Danlax\GoodQuadcom.reg" amp; SCHTASKS /Delete /TN "psv_Tiplab" /F ==== UWAGA
Task: {A330F8AC-F4EA-49C1-83C1-5675B7EC3CE6} - System32\Tasks\psv_Trisflex = cmd.exe /c regedit.exe /s "C:\ProgramData\Danlax\Stringsoft.reg" amp; del "C:\ProgramData\Danlax\Stringsoft.reg" amp; SCHTASKS /Delete /TN "psv_Trisflex" /F ==== UWAGA
Task: {A6254482-42AB-49EC-A53D-1851C978F0DA} - System32\Tasks\psv_ZimEco = cmd.exe /c regedit.exe /s "C:\ProgramData\Danlax\Inchtex.reg" amp; del "C:\ProgramData\Danlax\Inchtex.reg" amp; SCHTASKS /Delete /TN "psv_ZimEco" /F ==== UWAGA
Task: {B2D171C8-7D0C-4F38-9091-AF2B3D6B0DC7} - System32\Tasks\psv_Goldensoft = cmd.exe /c regedit.exe /s "C:\ProgramData\Danlax\HomeTouch.reg" amp; del "C:\ProgramData\Danlax\HomeTouch.reg" amp; SCHTASKS /Delete /TN "psv_Goldensoft" /F ==== UWAGA
Task: {B373DB18-7CC2-4D59-B3FF-9E58DFA1C39C} - System32\Tasks\psv_Soncom = cmd.exe /c regedit.exe /s "C:\ProgramData\Danlax\Zummaflex.reg" amp; del "C:\ProgramData\Danlax\Zummaflex.reg" amp; SCHTASKS /Delete /TN "psv_Soncom" /F ==== UWAGA
Task: {D63FC146-0A82-4A84-B284-D5E8F79DA769} - System32\Tasks\psv_Zonezap = cmd.exe /c regedit.exe /s "C:\ProgramData\Danlax\Konkphase.reg" amp; del "C:\ProgramData\Danlax\Konkphase.reg" amp; SCHTASKS /Delete /TN "psv_Zonezap" /F ==== UWAGA
Task: {E1517D26-BFF5-48E9-AB72-C23F03C97433} - System32\Tasks\psv_Y-todom = cmd.exe /c regedit.exe /s "C:\ProgramData\Danlax\Volfind.reg" amp; del "C:\ProgramData\Danlax\Volfind.reg" amp; SCHTASKS /Delete /TN "psv_Y-todom" /F ==== UWAGA
Task: {E800CF5D-82CD-4282-B6BC-92205A72264F} - System32\Tasks\psv_Daltjob = cmd.exe /c regedit.exe /s "C:\ProgramData\Danlax\Zumlab.reg" amp; del "C:\ProgramData\Danlax\Zumlab.reg" amp; SCHTASKS /Delete /TN "psv_Daltjob" /F ==== UWAGA
Task: {EBAF975B-64C5-46E6-BDBA-EF0884A93A9D} - System32\Tasks\psv_Geocom = cmd.exe /c regedit.exe /s "C:\ProgramData\Danlax\Tripplefresh.reg" amp; del "C:\ProgramData\Danlax\Tripplefresh.reg" amp; SCHTASKS /Delete /TN "psv_Geocom" /F ==== UWAGA
Task: {EEDE5F0D-37AA-44B8-A992-BE125E2392C2} - System32\Tasks\psv_FunIs = cmd.exe /c regedit.exe /s "C:\ProgramData\Danlax\Zimex.reg" amp; del "C:\ProgramData\Danlax\Zimex.reg" amp; SCHTASKS /Delete /TN "psv_FunIs" /F ==== UWAGA
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc = ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcpltsvc = ""=""
EmptyTemp:
Uruchom FRST i kliknij Napraw (Fix). Pokaż raport z usuwania Fixlog.
Co Ty wyprawiasz?
Wklej do systemowego notatnika i zapisz jako plik tekstowy o nazwie fixlist :
Reg: reg delete HKCU\Software\Google /f
Reg: reg delete HKLM\SOFTWARE\Google /f
Reg: reg delete HKLM\SOFTWARE\Wow6432Node\Google /f
DeleteQuarantine:
Uruchom FRST i kliknij Napraw (Fix). Skasuj folder C:\FRST