Witam. Mam problem z przeglądarką przez wyskakające złośliwe reklamy przeskanowałem system ADWcleaner, pomogło ale nie do końca.
W panelu sterowania odinstaluj:
Ask Toolbar
Certified Toolbar 2.1
McAfee Security Scan Plus
YAC(Yet Another Cleaner!)
Pobierz i uruchom AdwCleaner Kliknij Skanuj (Scan) i później Usuń (Cleaning).
Kliknij Skanuj (Scan) i pokaż nowy raport z FRST bez Addition i Shortcut.
Wklej do systemowego notatnika i zapisz jako plik tekstowy o nazwie fixlist :
HKLM\...\Run: [daugava] => C:\Program Files\daugava\Ejemidvlf.exe
HKLM\...\Run: [daugava64] => C:\Program Files\daugava\Ejemidvlf64.exe
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
SearchScopes: HKLM -> DefaultScope - brak wartości
SearchScopes: HKLM-x32 -> DefaultScope - brak wartości
SearchScopes: HKU\S-1-5-21-129265271-3525497852-1072832283-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO-x32: Certified Toolbar -> {0de094f5-e894-48c7-b16f-338d64674721} -> C:\Users\Kamil\AppData\Roaming\CertifiedToolbar\CertifiedToolbar.dll Brak pliku
Toolbar: HKLM-x32 - Certified Toolbar - {0de094f5-e894-48c7-b16f-338d64674721} - C:\Users\Kamil\AppData\Roaming\CertifiedToolbar\CertifiedToolbar.dll Brak pliku
Toolbar: HKU\S-1-5-21-129265271-3525497852-1072832283-1001 -> Brak nazwy - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - Brak pliku
FF SelectedSearchEngine: MyStart Search
FF HKLM-x32\...\Firefox\Extensions: [arthurj8283@gmail.com] - C:\Users\Kamil\AppData\Roaming\Mozilla\Firefox\Profiles\7vxrsqet.default\extensions\arthurj8283@gmail.com
FF ExtraCheck: C:\Program Files (x86)\mozilla firefox\firefox.cfg [2015-08-13] <==== UWAGA
OPR Extension: (RelevantKnowledge) - C:\Users\Kamil\AppData\Roaming\Opera Software\Opera Stable\Extensions\mkndcbhcgphcfkkddanakjiepeknbgle [2015-08-30]
S3 ewusbnet; system32\DRIVERS\ewusbnet.sys [X]
S3 ew_hwusbdev; system32\DRIVERS\ew_hwusbdev.sys [X]
S3 huawei_enumerator; system32\DRIVERS\ew_jubusenum.sys [X]
S3 hwdatacard; system32\DRIVERS\ewusbmdm.sys [X]
2015-09-23 21:53 - 2015-09-23 21:53 - 00000000 _____ C:\autoexec.bat
2015-09-23 21:51 - 2015-09-23 21:51 - 03237248 _____ (Enigma Software Group USA, LLC.) C:\Users\Kamil\Downloads\SpyHunter-Installer.exe
2015-09-23 21:34 - 2015-09-24 20:59 - 00000000 ____ D C:\AdwCleaner
2015-09-18 14:00 - 2015-09-18 14:00 - 06420480 _____ C:\Program Files (x86)\GUT569E.tmp
2015-09-18 14:00 - 2015-09-18 14:00 - 00000000 ____ D C:\Program Files (x86)\GUM5508.tmp
C:\Program Files\daugava
2015-08-30 20:03 - 2015-07-21 18:18 - 01084696 _____ (TMRG, Inc.) C:\Windows\system32\rlls64.dll
2013-05-25 18:23 - 2014-03-05 23:35 - 0003730 _____ () C:\Program Files (x86)\Mozilla Firefoxavg-secure-search.xml
2011-03-09 08:14 - 2011-03-09 08:15 - 0000109 _____ () C:\ProgramData\{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}.log
2011-03-09 08:08 - 2011-03-09 08:09 - 0000113 _____ () C:\ProgramData\{34FBC7C4-CD31-4D93-A428-0E524EAC4586}.log
2011-03-09 08:12 - 2011-03-09 08:13 - 0000105 _____ () C:\ProgramData\{40BF1E83-20EB-11D8-97C5-0009C5020658}.log
2011-03-09 08:09 - 2011-03-09 08:12 - 0000106 _____ () C:\ProgramData\{80E158EA-7181-40FE-A701-301CE6BE64AB}.log
2011-03-09 08:13 - 2011-03-09 08:14 - 0000110 _____ () C:\ProgramData\{CB099890-1D5F-11D5-9EA9-0050BAE317E1}.log
Task: {7F3604FA-D9D1-4BF8-A140-99DF58B2BAF2} - System32\Tasks\ProtectedSearch\Protected Search => C:\Program Files (x86)\Protected Search\ProtectedSearch.exe <==== UWAGA
Task: {BA6A9EB8-9328-4271-A76E-740C6ACD818D} - System32\Tasks\{E8696E02-51AF-4804-AA29-21D907B8999C} => pcalua.exe -a D:\Picasa3\Uninstall.exe
EmptyTemp:
Uruchom FRST i kliknij Napraw (Fix). Pokaż raport z usuwania Fixlog.
Kliknij Skanuj (Scan) i pokaż nowy raport z FRST bez Addition i Shortcut.