Witam! Jak w temacie:
Wrzucam logi z ADW i FRST (Malware nic nie wykrył):
http://wklej.to/Jo5VO -frst
http://wklej.to/eUZ2t -shortcut
Z góry dziękuję za pomoc.
Odinstaluj Spybot - Search & Destroy.Otwórz notatnik systemowy i wklej:
Task: {0D32E013-48E2-4319-A2D6-C9A27A1B91FF} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system = C:\Program Files\Spybot - Search amp; Destroy 2\SDScan.exe
Task: {3228409F-5A79-42B7-98DE-34E1DF2F5F90} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates = C:\Program Files\Spybot - Search amp; Destroy 2\SDUpdate.exe
Task: {6D437C3E-3A65-4E16-9A9A-7FB3117EA3E6} - System32\Tasks\{69D77C9A-83DD-4825-A8D5-0286EB9D255E} = Chrome.exe http://ui.skype.com/ui/0/6.7.0.102/pl/abandoninstall?page=tsMain
Task: {B3ADD173-CBC8-4F8F-A146-0CB22F740F09} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization = C:\Program Files\Spybot - Search amp; Destroy 2\SDImmunize.exe
Task: {E5556636-4864-4393-B381-FB46FD274549} - System32\Tasks\{A208E25D-FDD4-4001-B294-C79B4E66581F} = Chrome.exe http://ui.skype.com/ui/0/6.2.0.106/pl/abandoninstall?source=lightinstalleramp;page=tsMain
HKLM\...\Run: [RtHDVCpl] = C:\Windows\RtHDVCpl.exe [6265376 2013-01-22] (Realtek Semiconductor)
HKLM\...\Run: [Adobe ARM] = C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959176 2014-08-21] (Adobe Systems Incorporated)
BootExecute: autocheck autochk * sdnclean.exe
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction ======= ATTENTION
HKU\S-1-5-21-3555751715-3755171126-3729104144-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction ======= ATTENTION
SearchScopes: HKU\.DEFAULT - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - No Path
R2 SDScannerService; C:\Program Files\Spybot - Search Destroy 2\SDFSSvc.exe [1738168 2014-06-24] (Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files\Spybot - Search Destroy 2\SDUpdSvc.exe [2088408 2014-06-27] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files\Spybot - Search Destroy 2\SDWSCSvc.exe [171928 2014-04-25] (Safer-Networking Ltd.)
S3 catchme; \\C:\Users\Acer\AppData\Local\Temp\catchme.sys [X]
2018-09-29 00:20 - 2018-09-29 00:30 - 00000000 ____ D () C:\Program Files\Spybot - Search Destroy 2
2018-09-29 00:20 - 2018-09-29 00:21 - 00000000 ____ D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search Destroy 2
2018-09-29 00:20 - 2018-09-29 00:20 - 00002095 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot-SD Start Center.lnk
2018-09-29 00:20 - 2018-09-29 00:20 - 00002083 _____ () C:\Users\Public\Desktop\Spybot-SD Start Center.lnk
2018-09-29 00:20 - 2014-10-09 17:31 - 00000000 ____ D () C:\ProgramData\Spybot - Search Destroy
2018-09-29 00:20 - 2013-09-20 09:49 - 00018968 _____ (Safer Networking Limited) C:\Windows\system32\sdnclean.exe
2018-09-29 00:18 - 2018-09-29 00:19 - 46525608 _____ (Safer-Networking Ltd. ) C:\Users\Acer\Downloads\spybot-2.4.exe
2018-09-28 23:57 - 2011-06-26 07:45 - 00256000 _____ () C:\Windows\PEV.exe
2018-09-28 23:57 - 2010-11-07 18:20 - 00208896 _____ () C:\Windows\MBR.exe
2018-09-28 23:57 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2018-09-28 23:57 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2018-09-28 23:57 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2018-09-28 23:57 - 2000-08-31 01:00 - 00098816 _____ () C:\Windows\sed.exe
2018-09-28 23:57 - 2000-08-31 01:00 - 00080412 _____ () C:\Windows\grep.exe
2018-09-28 23:57 - 2000-08-31 01:00 - 00068096 _____ () C:\Windows\zip.exe
2018-09-28 23:56 - 2016-10-13 19:41 - 00000000 ____ D () C:\Qoobox
2014-12-24 14:52 - 2014-04-21 09:31 - 00000000 ____ D () C:\AdwCleaner
EmptyTemp:
Plik zapisz pod nazwą fixlist.txt i umieść obok FRST w tym samym folderze.
Jak wszystko gra to skasuj folder C:\FRST
Niestety data nadal jest nieaktualna.
Podczas startu komputera wejdź do BIOSu i sprawdź tam datę i czas bieżący. Jeśli się nie zgadza, ustaw. Po zatwierdzeniu i restarcie komputera sprawdź i ewentualnie skoryguj czas na dolnym pasku (tray’u).
Jeśli problem będzie się ponawiał w kolejnych dniach, wymień bateryjkę BIOSu.