Windows strasznie muli, Windows otwiera się prawie 5 minut.
Skan FRST:
ADDITION :http://wklej.org/id/1616650/
FRST : http://wklej.org/id/1616660/
Shortcut: http://wklej.org/id/1616663/
Otwórz notatnik systemowy i wklej:
Task: {3C2C5224-1CB1-490D-A9F5-ABB0D91BA301} - System32\Tasks\AVG-Secure-Search-Update_JUNE2013_TB_rmv = C:\Windows\TEMP\{5A20290E-B753-48F2-BDD1-022D1C9B7504}.exe
Task: C:\Windows\Tasks\AVG-Secure-Search-Update_JUNE2013_TB_rmv.job = C:\Windows\TEMP\{5A20290E-B753-48F2-BDD1-022D1C9B7504}.exe
HKLM\...\Run: [RtHDVCpl] = C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11775592 2011-01-12] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] = C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2186856 2011-01-10] (Realtek Semiconductor)
HKLM-x32\...\Run: [ROC_roc_dec12] = "C:\Program Files (x86)\AVG Secure Search\ROC_roc_dec12.exe" /PROMPT /CMPID=roc_dec12
HKLM-x32\...\Run: [NBKeyScan] = "C:\Program Files (x86)\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"
HKU\S-1-5-21-3368039680-1789548144-3060007014-1001\...\Run: [AVG-Secure-Search-Update_JUNE2013_TB] = "C:\Program Files (x86)\AVG Secure Search\AVG-Secure-Search-Update_JUNE2013_TB.exe" /PROMPT /CMPID=JUNE2013_TB
SearchScopes: HKU\.DEFAULT - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\.DEFAULT - {5F9AA194-0D9D-46AE-A6EB-038776E92199} URL = http://www.amazon.co.uk/gp/search?ie=UTF8keywords={searchTerms}tag=tochibauk-win7-ie-search-21index=blendedlinkCode=ur2
SearchScopes: HKU\.DEFAULT - {95B7759C-8C7F-4BF1-B163-73684A933233} URL = http://isearch.avg.com/search?cid={70C6D9E1-3D64-45AC-B73E-86C33AAE5072}mid=ecae95bb660847d18e13d15756fb9687-79121ba44bd12ed27bd03b0a3b0849a4ee4789b2lang=plds=AVGpr=frd=2012-06-07 13:12:44v=11.1.0.12sap=dspq={searchTerms}
SearchScopes: HKU\S-1-5-19 - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-3368039680-1789548144-3060007014-1000 - {24ADBF89-54FD-4510-A1A0-B1E9B3D0B97C} URL =
SearchScopes: HKU\S-1-5-21-3368039680-1789548144-3060007014-1000 - {4BB8E517-6008-4295-A3B8-10D84BB3ED02} URL =
SearchScopes: HKU\S-1-5-21-3368039680-1789548144-3060007014-1000 - {54A36131-19EB-4EF9-84C7-87F92250522C} URL = http://www.amazon.co.uk/gp/search?ie=UTF8keywords={searchTerms}tag=tochibauk-win7-ie-search-21index=blendedlinkCode=ur2
SearchScopes: HKU\S-1-5-21-3368039680-1789548144-3060007014-1000 - {77598B5D-DFC7-408C-8E3E-E5B4255A7CD4} URL = http://rover.ebay.com/rover/1/4908-44618-9400-8/4?satitle={searchTerms}
SearchScopes: HKU\S-1-5-21-3368039680-1789548144-3060007014-1001 - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
CHR HKLM-x32\...\Chrome\Extension: [ndibdjnfmopecpmkdieinmbadjfpblof] - C:\ProgramData\AVG Secure Search\ChromeExt\18.1.9.799\avg.crx [Not Found]
S2 vToolbarUpdater15.3.0; C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\15.3.0\ToolbarUpdater.exe [X]
2013-07-22 21:00 - 2014-07-14 12:08 - 0003728 _____ () C:\Program Files (x86)\Mozilla Firefoxavg-secure-search.xml
EmptyTemp:
Plik zapisz pod nazwą fixlist.txt i umieść obok FRST w tym samym folderze.
odinstaluj aktualnego antywirusa zainstaluj baidu antivirus i zrób nim skan. dodatkowo: MBAM/Emsisoft emergency kit/adwcleaner.
Pokaż okno procesów.
Sprawdzimy autostart -Uruchom autoruns jako administrator -http://technet.micro…s/autoruns-po skończonym skanie-File>save>plik-AutoRuns.arn- umieść na -http://sendfile.pl/- na forum podaj linka
Uruchom autoruns jako administrator